What, what and when does it do with the accounts of laid-off employees at home?

Question

Helpdesk

Hello.
Share your experience - what do you do (and when) with the accounts of laid-off employees?
Interested in the overall picture about profiles, mailboxes, resources...

Answer 1

Approximately the following algorithm:
Personnel sends a list of dismissed
AD:
Disable UZ -> move to OU for disabled
Once a week or month, run a script that will remove from all groups and clean OU from UZ blocked more than a month ago.
Exchange: Ordinary employee - we crash the mailbox (by default within 15 days, if anything can be restored), what manager - we create a wheel, on which we prohibit the circulation of mail, disable access via owa, activesync, etc. It is also advisable to move these to a separate base so as not to be confused.
Resources - what do you mean? Access via smb or NTFS - only to groups, no personalities, and your problem is solved at the step "we run the script once a week..."))
Locally on the computer - reloading the system with formatting all disks. If there are no resources for this work - at your own peril and risk, you can, in principle, do nothing at all - a new employee came - he sat down and works under his own UZ)