Employee IT onboarding & offboarding.

Before the first day.

• Confirm the start date, manager approval, job responsibilities, and required systems.
• Prepare and record the assigned computer, monitor, phone, accessories, and asset numbers.
• Apply operating system updates, device encryption, endpoint protection, and approved device management.
• Create an individual business account, email address, and appropriate software licenses.
• Grant only the applications, shared folders, groups, and remote access needed for the role.
• Prepare a secure first-sign-in process and arrange multifactor authentication enrollment.

First-day setup & checks.

• Complete the first sign-in, change any temporary password, and enroll in multifactor authentication.
• Set up the approved password manager and explain how to store and share business credentials.
• Test email, calendar, collaboration tools, shared files, and required business applications.
• Confirm business files are stored in approved locations covered by the organization's protection plan.
• Explain phishing reporting, acceptable use, device care, and the Help Center support process.
• Confirm with the employee and manager that access works and record any outstanding issues.

At the agreed departure time.

Coordinate timing with the manager and HR. Preserve required business information before deleting accounts, removing licenses, or wiping devices.

• Confirm the authorized departure time, responsible person, and business owner for retained files and email.
• Disable sign-in and revoke active sessions for business accounts, including Microsoft 365.
• Remove access to VPN, remote support, business applications, password vaults, and third-party services; check accounts outside single sign-on.
• Revoke authentication methods, app passwords, personal access tokens, and assigned security keys where applicable.
• Change any shared credentials the person knew and transfer ownership of business integrations or service connections.
• Recover company devices, access badges, keys, security tokens, and accessories; record what remains outstanding.

Transfer, recover & close out.

• Preserve business email and files according to company retention requirements and assign approved access to the new owner.
• Arrange approved mailbox handling, customer contact updates, and phone or voicemail reassignment.
• Remove company data from managed devices as authorized; preserve needed information before wiping or reassigning equipment.
• Confirm retention and data transfer are complete before reclaiming licenses or scheduling account deletion.
• Update the asset inventory, application owners, group memberships, and recovery contacts.
• Have the manager and IT owner verify completion and record any exceptions or follow-up work.