When an Employee Leaves, Where Does Their Access Go?

December 15th, 2027

The last day is a blur of well-wishes, a card, and a box of belongings. It is also the day the company's access map changes. The email account, the shared files, the cloud apps, the building keycard, and the phone extension all belonged to a person who is about to be somewhere else.

Most offices handle the goodbye better than the access. The accounts stay active because nobody wants to delete something important. The shared password stays the same because changing it would inconvenience people. The keycard is returned, or maybe it is not.

Access Is Not Just the Login

An employee's access is spread across more systems than most people realize. A complete offboarding list includes:

• Email, including the mailbox, calendar, and distribution groups.
• Computer and network login, including local administrator rights.
• Cloud file storage, including shared folders and links they created.
• Line-of-business applications, such as accounting, CRM, practice management, or payroll.
• Phone system, including the extension, voicemail, and any call routing.
• Building access, including keycards, alarm codes, and keys.
• Shared passwords the person knew or could have copied.
• Printers and scanned document destinations that point to their account.

The list is long, which is why it should be a checklist rather than a memory exercise.

Decide What Happens to the Mailbox

The mailbox is the most common loose end. A manager may want to read the messages, a coworker may need a client thread, and the person may have been the only one who knew about a pending issue.

Decide before the last day. Options include forwarding the mail to a manager for a set period, giving a coworker access to the mailbox, or setting an automatic reply that tells senders who to contact instead. Whichever you choose, put an end date on it. A forwarded mailbox that nobody watches is a security risk and a confusing experience for the sender.

Export the mailbox if the company needs a record. Then disable the account at the agreed time.

Hand Over the Files

A departing employee's files are often the most valuable thing they leave behind, and the easiest to lose. Before the last day, ask them to identify the active projects, the current versions, and the people who should take over each one.

Move the files to a shared location the team can reach. Check that the files are not stored only on the employee's computer or in a personal cloud account. Check the links they created and make sure the shared folders still work after their account is disabled.

If the person had access to client records, confirm that the records are in the official system and not only in their email. A client history that lives in one mailbox is not a client history the business owns.

Change the Shared Passwords

If the departing employee knew a shared password, change it. That includes the Wi-Fi password, the alarm code, the supply cabinet code, and any shared login that was never meant to be shared.

The same applies to any password that was written down or stored in a place the person could access. A password manager makes this easier: remove the person from the vault, rotate the credentials they could see, and check the audit log for anything unusual.

Disable the Accounts on Time

The account should be disabled at the time the employment ends, not when someone remembers. If the departure is planned, put the date and time on the calendar. If the departure is sudden, disable the accounts first and sort out the mailbox access afterward.

Disabling the account is not the same as deleting it. Keep the account disabled for a period so the mailbox and files can be reviewed, then delete it according to the company's records policy. Do not leave a disabled account with an active mailbox forward indefinitely.

Watch for the Unusual

Most departures are ordinary. A few are not. Watch for files being copied in bulk, emails forwarded to a personal address, cloud links shared with outside accounts, or a sudden change in behavior in the weeks before the last day.

If something looks wrong, preserve the evidence and involve the appropriate people. Do not confront the employee alone, and do not delete the account before the review is complete.

A Checklist, Not a Scramble

Offboarding is easier when it is planned at the same time as onboarding. The same list that sets up an employee can be used to close the account, and the same record of equipment and access can be checked at the other end.

Keep the checklist short enough to use and specific enough to matter: who does what, by when, and how it is confirmed. The last day will still be busy. The access should not be.

Complete Document Solutions helps Southern California businesses with cloud computing, cyber security, and managed IT services, including onboarding and offboarding support. If employee departures leave loose ends, contact us and we can help you build a checklist that closes them.