Employee Separation Checklist

Process Notes:

  1. In Connectwise Manage, open the Contacts tab, and search for the user. Open the correct user or multiple users in some cases, and scroll down to the radio buttons for active / inactive.
  2. Mark the user as inactive and click Save.

Process Notes:

  1. Log into the Proofpoint Admin Center using your admin credentials.
  2. Select the client from the list of clients.
  3. Navigate to User Management and search for the departing employee's account.
  4. Check the box next to this employee ONLY, then "Mass Update Users", change their role to Functional Account, and delete the placeholder keystroke in the Change Password field.
  5. Click Save or OK.

GUI Method:

  1. On a domain controller or domain computer with RSAT tools installed, open Active Directory Users and Computers.
  2. Locate the user's account.
  3. Right-click the account and select 'Disable Account'.
  4. Reset password if requested (Right-click > Reset password)

Command line method (faster):

  1. In an elevated command prompt on a domain controller (including Screenconnect command line) type the following, replacing `(username)` with the actual login name of the user, then hit Enter.
    `net user (username) /active:no`
  2. Reset password if requested (`net user (username) (newPassword)`)

Process Notes (PowerShell):

  1. Connect to Exchange Online PowerShell.
  2. Run the command: `Set-Mailbox -Identity "User's Alias" -Type Shared`
  3. Assign Full Access and Send As permissions to the designated manager.
  4. Run: `Add-MailboxPermission -Identity "User's Alias" -User "Manager's Alias" -AccessRights FullAccess`
  5. Run: `Add-RecipientPermission -Identity "User's Alias" -AccessRights SendAs -Trustee "Manager's Alias"`