Employee Onboarding and Offboarding: The IT Checklist That Prevents Headaches

Every company does this. Few do it with documentation. The result: after a few years, no one knows who still has active access, how many M365 licenses are unused, or whose phone is still registered in the system.

When a new employee arrives

• Account in Active Directory / Entra ID
• M365 license of the appropriate type
• Group access based on role (not 'like Janez')
• Email, signature, mobile device
• Workstation setup
• MFA registration
• Brief instructions for reporting issues (support portal)

When an employee leaves

1. Account lockout at a strictly agreed time
2. Password change and revocation of active sessions
3. Mail forwarding to a manager or shared mailbox
4. Transfer of OneDrive content to a manager
5. Unregistering mobile devices
6. Removal from all groups and external systems
7. Releasing the M365 license
8. Entry in the offboarding log

Why it matters

An active account of a former employee is one of the most common security holes. At the same time, unused M365 licenses can mean hundreds of euros in unnecessary costs per company annually.