A contractor left months ago yet their Microsoft 365 login still works. This points to an offboarding gap your IT company should already own.
Offboarding That Sticks
Good IT treats every departure as a standard process that removes access the same day. The contractor hands back the laptop, the account gets disabled in Microsoft 365, and shared mailboxes stay protected. When that step is skipped, the former contractor can still open email or pull client files weeks later.
The tell is simple. A vendor invoice arrives and the bookkeeper notices the old contractor name still appears in the sent folder. Or the office manager tries to reset a password and finds the account active. These signs show the IT company did not close the loop.
Microsoft 365 Logins and Shared Files
Microsoft 365 holds the daily work of a small office. When a contractor leaves, good IT disables the account before the next billing cycle. They also check any shared folders the contractor used for vendor records or client lists.
If your provider misses this, the login stays live. The contractor could open old invoices or forward messages without anyone knowing. We check every account tied to a departure and remove access before the person walks out the door.
What we do We disable Microsoft 365 accounts and shared access the same day a contractor leaves, then confirm no devices remain logged in.
Laptops That Walk Out the Door
A laptop often leaves with the contractor. Good IT records the device, wipes it on return, and confirms the Microsoft 365 session ends on that hardware. They also check any phone or tablet the person used for work email.
The tell shows up when the bookkeeper tries to open a file from the laptop and sees the old login still cached. Or the office manager receives a support ticket because the former contractor password still works on a remote session. These gaps mean the IT company did not track the hardware or the cloud session tied to it.
What Happens When Access Lingers
Loose accounts create quiet problems that surface at the worst time.
- A vendor invoice gets altered without notice.
- Old client lists move to a personal drive.
- Shared calendars show meetings the contractor no longer needs to see.
Each item points back to the same root. The IT company did not own the offboarding step. We run a final check on every identity and device when someone exits, so the owner never has to wonder if an account stayed open.
When your IT partner handles departures as routine work, the surprise of an active login months later does not happen. reach out to see how we manage it.