Offboard users
Deactivate departed employees: disable sign-in, revoke access, hand over their mailbox
–
…
Search users to offboard
What should happen to each account?
Revoke Microsoft 365 licenses
Frees the seat immediately for reassignment
Remove from groups
Security and Microsoft 365 groups
Keep distribution lists
Continuity of internal comms during handover
Randomize password
Defense in depth if re-enabled by mistake
Convert mailbox to shared
Preserves mail history for handover, frees the license
Grant mailbox access to (optional)
Move to organizational unit (optional)
Browse
not previewed
Preview offboarding