Deactivate an employee from all systems

Introduction

Use this guide to permanently deactivate an employee from all systems, including email, security groups, and directories. This process helps protect your organization by removing access and reducing the risk of unauthorized use after separation.

Process description

This process is used when an employee must be fully removed from active access across connected systems. It should be completed according to your organization’s offboarding policy and any applicable security or compliance requirements.

Prerequisites

• Confirmation that the employee should be permanently disabled
• Administrative access to the systems involved
• Employee account details, such as name, username, or email address
• Any required approval from HR, IT, or management

Step-by-step instructions

1. Verify the deactivation request and confirm the employee must be permanently disabled from all systems.

2. Disable the employee’s email account and prevent future sign-in access.

3. Remove the employee from all security groups, roles, and shared access permissions.

4. Remove or disable the employee in all directories and identity systems used by your organization.

5. Confirm the employee is no longer active in any connected applications, integrations, or external services.

6. Document the completion of the deactivation process for audit and compliance purposes.

Tips and best practices

• Follow a standard offboarding checklist so no system is missed.
• Use a second review for high-access or privileged accounts.
• Keep a record of who approved the deactivation and when it was completed.
• If your organization uses multiple directories or identity providers, confirm each one separately.

Next steps

After deactivation is complete, review any shared devices, service accounts, or delegated access that may also need to be updated. If the employee may return in the future, follow your organization’s reactivation policy instead of creating a new account.

Additional information

If your organization uses [Product/service name] or another internal system for offboarding, refer to your admin documentation for system-specific steps. For help completing a permanent deactivation request, contact [support team/contact method].

Disclaimer

This guide is a general process overview and may not include every system used by your organization. Follow your internal security, HR, and compliance policies when disabling employee access.