What should IT check on the network when an employee leaves?
The access the person had, not only their account. A short leaver checklist for IT: disable the directory and e-mail accounts and remove multi-factor authentication tokens; collect company devices and note their names; change shared passwords the person knew, such as Wi-Fi, VPN, admin and supplier portals; remove remote-access tools they installed; revoke device certificates; and check, a few days and a few weeks after the leaving date, that none of their devices still appears on the network. Run the same checklist for contractors and interns. Agree with HR who triggers it and when. NetSenX helps with the last step: the network map, on every plan, shows each device's name and when it was last seen, so a device that should be gone stands out.
General information, not legal advice. National laws can add to the EU texts quoted here, for example deadlines, forms or reporting channels: check your own country's rules.
Read next
Related questions
- Can we see when an unreturned company laptop connects again?
- Can we see if a leaving employee uploads company data to the cloud?
- What evidence is lawful to collect when an employee leaves for a competitor?
- Does network monitoring show which files an employee took?
- Does network monitoring read employees' e-mails or messages?