It’s really important for organization security to offboard an employee fully. Not only does it enable you to re-use their device for a future employee, but it also prevents the risk of an ex-employee accessing any company data. Here are steps we recommend:
Wipe/Lock the Device
Depending on what you want to use the device for in the future, you may chose to lock or wipe it. Locking it will prevent the user from access it, but allow you to still access the information should you wish to retrieve anything. You can always wipe a locked device in the future.
To lock or wipe a device, follow the steps here.
[Windows Only] Un-assign License
- Login to Entra
- Navigate to Users
- Search and click into users name
- Select Licenses
- Click into the assigned license (if it's still showing up)
- Select Remove License.
Suspend/Deactivate User Accounts
For Google accounts, suspend the account using the instructions here.
For Entra accounts:
- Log into Entra
- Navigate to Users in the left-hand menu.
- Search for the specific user you need to suspend and click on their name.
- Under Account, locate the option to block sign-in.
- Toggle the Block Sign-In switch to Yes
- Click Save to confirm the suspension.
Note that the record of the employee's device or account will still exist in the Zip Console, unless the record is deleted from upstream providers. The device and/or account can be Excluded from security controls and reporting following the instructions here.