Every new employee needs accounts, access, a protected computer and a clear start. Every departure needs the opposite: access closed, data preserved and equipment recovered. ECSG handles both with a consistent checklist — so nothing is forgotten, in either direction.
When people join and leave without a process, the same three things happen again and again.
The new hire waits for a laptop, a password or a shared folder — and their first impression is that nothing works.
Lost productivityAccounts that stay active after someone leaves are an open door to company email, files and customer data.
Security riskLicenses, devices and subscriptions keep running for people who no longer work there.
Wasted costBoth start the same way: a request to our help desk. From there, every step is tracked in the ticket.
Accounts, access and equipment prepared before the first day, based on the role.
Name, role, start date and what they'll need — logged as a ticket.
Microsoft 365 account created, licensed and protected with multi-factor authentication.
Teams, SharePoint sites, shared mailboxes, groups and business applications — only what the role requires.
Computer prepared with standard apps, monitoring, endpoint protection, safe browsing and backup.
First sign-in guided, MFA set up on their phone and security awareness training assigned.
Access closed at the right moment, company data kept and equipment recovered.
Last day confirmed with the manager or HR — including the exact moment access should end.
Sign-in blocked, active sessions revoked, password reset and MFA methods removed.
Mailbox converted to a shared mailbox and OneDrive access delegated to the manager. See how
Computer collected, backed up if required and wiped or prepared for the next person.
Licenses removed or reassigned, groups and shared passwords updated, everything documented.
When an employee leaves, two things must happen at the same time: nobody should be able to sign in with their account, and the business must keep everything they were working on. This is the procedure ECSG follows.
Sign-in is blocked and active sessions are closed on every device, so the account can't be used — not from the office, a phone or home.
The mailbox is converted into a shared mailbox and access is delegated to the manager or the person taking over the role.
Access to the former employee's OneDrive files is delegated to the same manager, so documents, spreadsheets and projects stay within reach.
Each new person is added to the same tools that protect everyone else. Each departure is removed from all of them.
Mailbox, OneDrive, Teams and the right license for the role — then removed or reassigned when the person leaves.
Multi-factor authentication is set up during the first sign-in, not weeks later.
Teams, SharePoint sites, shared mailboxes and applications are granted based on the role — and reviewed when people change roles.
Monitoring, patching, endpoint protection, safe browsing and backup are in place before the device reaches the user.
New employees are enrolled in security awareness training to learn how to spot phishing and fraud.
Who was given what, and when it was removed, is recorded in the ticket.
Not every departure is planned. When a termination is sensitive, we coordinate with the manager or HR so access is closed at the exact moment it's needed — not before, not after.
Accounts, sessions and remote access are shut down together, and company data is preserved for review.
Promotions and transfers need access changes too. We add what the new role needs and remove what the old one no longer requires.
That way, access doesn't quietly pile up over the years.
Send the request to our help desk. The earlier we know, the smoother the first — or last — day will be.
The earlier, the better — especially when a new computer has to be ordered. With enough notice, accounts, access and equipment are ready before the first day.
They stay with the company. We block the account, convert the mailbox into a shared mailbox with access delegated to the manager, and delegate access to the employee's OneDrive files to the same person — so nothing important is lost and customers keep getting answers.
Yes. We coordinate the exact timing with the manager or HR, and close sign-in, active sessions and remote access together.
Often, yes. Licenses from departing employees are removed or reassigned, so you're not paying for accounts nobody uses.
It depends on your policies. We'll recommend what level of access personal devices should have and how to protect company data on them.
We'll review your active accounts, licenses and access, then explain in plain language what should be closed, cleaned up or standardized. No obligation.
Secure. Reliable. Human.
Request an Access Review