When an employee leaves your company, their Microsoft 365 account does not leave with them unless someone closes it on purpose. For a business owner in Round Rock or anywhere in Central Texas, good IT support Round Rock companies can rely on in 2026 starts with a written offboarding routine that shuts the door on day one, protects the files, and stops the license bill for a seat nobody uses.
Quick Answer: On the day someone leaves, block their sign in, sign them out of every device, hand their mailbox and files to a manager, and only then remove the license. Those four moves keep a former employee's account from turning into an open door.
Key Takeaways
- A Microsoft 365 account stays active after an employee leaves until someone disables it.
- Blocking sign in and ending active sessions comes first, before any files are moved.
- Converting a mailbox to a shared mailbox keeps customer email flowing without paying for a full license.
- Files in OneDrive and Teams need a named new owner before the account is deleted.
- A quarterly review of old accounts catches the people your process missed in the past.
What's at Stake When a Former Employee Still Has Access
Think about the last person who left your company. Did anyone sign them out of their phone? Did their email keep collecting messages from customers? Did the license keep billing every month?
An account that nobody watches is a risk for three reasons. First, it can still reach company data. A former employee, or someone who guesses an old password, may be able to open client files, shared folders, and email history. Second, customers keep writing to that address, and messages pile up unread. Third, you keep paying. A license for a person who left months ago is money leaving your business for nothing.
If you serve healthcare clients, handle legal files, or work as a defense contractor with CMMC obligations, an old account is also a compliance problem. Auditors and insurance carriers want to see that access ends when employment ends.
An unused account is not a harmless account. It is a door nobody is guarding.
Why Central Texas Businesses Face This Challenge
Growth is the reason this problem shows up so often here. Along the I-35 corridor from Austin up through Round Rock, Georgetown, and Temple, new employers open their doors every month, and good people have more options than ever. A receptionist who starts with you in March might get a better offer from a medical group down the road by summer, and your office manager gets recruited by a manufacturing company across town. Turnover isn't a sign something's wrong with your business. It's the price of operating where everyone is hiring. Owners in Pflugerville, Cedar Park, and Bastrop tell us the same story.
In a company of 10 to 250 employees, there is rarely a full-time IT person or an HR system wired into the tech stack. The manager finds out on Friday that someone is leaving, the person walks out, and the IT request gets lost between a hallway conversation and a sticky note. Nobody is careless. The process simply was never written down.
You are the one who feels exposed when that happens, and that feeling is fair. A business deserves technology that helps it thrive, not an unlocked account waiting to cause trouble.
How CTTS Helps You Close the Offboarding Gap
We have supported Central Texas businesses since 2002, and offboarding is one of the first routines we put in place for new clients. Under Complete Care Coverage, our fully managed offering, a departure becomes a simple request to our local team. One message from you or your office manager starts a standard checklist, and our team answers in 3 rings, so the request does not wait in a queue.
We handle the technical steps in the right order, document what was done, and confirm with you that the manager has the files they need. Every quarter we also review the full list of accounts against your current staff list, so the person who left two years ago does not stay on the books. Our clients have rated us 96% CSAT across 159 surveys, and quiet, reliable routines like this are a big part of why.
You stay the hero of the story. You decide who leaves and who gets their files. We make sure it happens cleanly.
A Practical Microsoft 365 Offboarding Plan
What should happen in the first hour after someone leaves?
Block the account from signing in and end all active sessions. This is the single most important step, and it takes only a few minutes in the Microsoft 365 admin center.
The order matters. Here is the checklist we use:
- Block sign in so the account cannot be used.
- Sign the user out of all sessions, so phones, laptops, and browsers lose access.
- Reset the password and remove saved sign in methods such as an authenticator app.
- Remove the user from groups, Teams, and shared mailboxes they managed.
- Collect company devices and wipe or retire them.
- Assign a manager to the mailbox and files, then remove the license when the data is safe.
Should you delete the account, convert it, or keep it?
Most owners have three choices, and the right one depends on what the person did. Here is how they compare.
Disable and keep. The account stays, sign in is blocked, and the license may still bill. This works for a short hold while a manager reviews the files, but it should never become permanent.
Convert to a shared mailbox. The mailbox keeps receiving email, a manager or team can read it, and in most cases it no longer needs a paid license, as long as it stays under Microsoft's size limit. This is the best fit for anyone who talked to customers, such as sales, front desk, or billing.
Delete the account. This is the cleanest option for people with no customer contact, but it should come last. Microsoft keeps a deleted account for a limited recovery window, and after that the data is gone for good. Confirm the files have a new home first.
What about OneDrive files, Teams, and shared mailboxes?
Move the files to a named person before the account disappears. A departing employee's OneDrive holds more business information than most owners expect, including quotes, client notes, and drafts of contracts.
Give a manager access to the OneDrive and have them copy what the company needs into a shared SharePoint library. Then check Teams. If the person owned a team or a channel, make sure a current employee now owns it, otherwise the team can end up with no one in charge.
How do you catch accounts that were missed in the past?
Run a stale account review. Export the list of users from Microsoft 365, compare it with the current payroll list, and look at who has not signed in recently. Anyone on the first list but not the second is a candidate to be disabled.
Look for the quiet ones too: contractors, interns, and shared logins created for a project. These are the accounts most often forgotten, and they are often the ones with the weakest protection.
Do phones and personal devices need attention?
Yes. If a former employee read company email on a personal phone, signing out of all sessions and removing the company data from that device closes the gap. A managed device policy lets you remove only company information and leave the person's own photos and messages alone. It is also the fairest way to handle a departure, because it protects your business without touching their personal life.
For more detail, Microsoft publishes its own steps for removing a former employee.
Pair that with your internal process, and you have an offboarding routine that works for a ten person office in Round Rock and a 200 person company near Austin alike.
Take the Next Step
If you are not sure how many old accounts are sitting in your Microsoft 365 tenant today, that is the place to start. Our Executive IT Risk Assessment includes a review of active accounts, licenses, and sign in activity, and it shows you exactly who still has access to your data. You get a plain English report you can act on, with no pressure and no jargon.
Schedule a free strategy session with CTTS, and we will walk through your offboarding routine together.
Have Questions? We've Got Answers
How quickly should I disable a former employee's Microsoft 365 account?
On the day they leave, and for an unfriendly departure, before the conversation happens. Blocking sign in takes minutes and can be undone, so there is little downside to acting early.
Do I have to keep paying for a license after someone leaves?
Usually not. Once the mailbox is converted to a shared mailbox and the files are moved, the license can be removed. Check the size limits first, because a very large mailbox may still need a license.
What happens to their email if I delete the account?
Microsoft holds a deleted account for a limited recovery window, and after that the mailbox and files are permanently removed. Convert the mailbox or export what you need before you delete, especially if clients still write to that address.
Contact CTTS today for IT support and managed services in Austin, TX. Let us handle your IT so you can focus on growing your business. Visit CTTSonline.com or call us at (512) 388-5559 to get started!