SOLVED

User termination process regarding mails and data

%3CLINGO-SUB%20id%3D%22lingo-sub-6404%22%20slang%3D%22en-US%22%3EUser%20termination%20process%20regarding%20mails%20and%20data%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-6404%22%20slang%3D%22en-US%22%3E%3CP%3EIm%20not%20sure%20where%20to%20ask%2C%20but%20I%20think%20it%20is%20related%20to%20admin's%20process.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EWhen%20employee%20leaves%2C%20as%20a%20admin%2C%20I%20have%20to%20delete%20their%20account.%20But%20before%20I%20have%20to%20backup%20their%20mails%20and%20data%20in%20onedrive%20first.%3C%2FP%3E%3CP%3EI%20found%20it%20way%20more%20complicated%20than%20Google%20works%20product.%3C%2FP%3E%3CP%3EAFAIK%2C%20when%20emplyee%20leaves%20I%20have%20to%20follow%20these%20steps%3B%20please%20correct%20me%20if%20I%20am%20wrong.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3COL%3E%3CLI%3EBlock%20login%3B%3C%2FLI%3E%3CLI%3EGo%20to%20sharepoint%20admin%20site%2C%20grant%20access%20to%20someone%20who%20will%20be%20handed%20terminated%20employee's%20data%3C%2FLI%3E%3CLI%3EGo%20to%20terminated%20employee's%20onedrive%3C%2FLI%3E%3CLI%3EManual%20backup%3C%2FLI%3E%3CLI%3EGo%20to%20exchange%20admin%20site%2C%20change%20terminated%20emplyee's%20mailbox%20to%20sharedmailbox%20or%20grant%20access%20permission%20to%20someone%3C%2FLI%3E%3CLI%3EManual%20backup%20using%20PST%20file.%3C%2FLI%3E%3CLI%3EDelete%20user%20account%3C%2FLI%3E%3C%2FOL%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EWell%2C%20if%20I%20may%20compare%20to%20Google%20works%2C%20it%20is%20way%20more%20complicated.%20In%20Google%20works%2C%20if%20I%20delete%20account%2C%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3COL%3E%3CLI%3Ethey%20give%20me%20options%20to%20download(check%20out)%20all%20datas%20and%20emails%20in%20zip%20file.%3C%2FLI%3E%3C%2FOL%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EJust%20one%20step.%20And%20it's%20done.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EPlease%20correct%20me%20if%20Im%20wrong%2C%20cause%20i%20am%20not%20an%20IT%20guy%20even%20I%20manage%20my%20tenant.%20Only%20reason%20I%20am%20doing%20this%20admin%20job%20is%20just%20becasue%20I%20know%20how%20to%20turn%20on%2Foff%20computer.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EIt%20is%20only%20way%20to%20back%20up%20terminated%20account's%20mail%20and%20data%3F%20Or%20is%20there%20any%20simpler%20way%3F%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-6404%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3EAdmin%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E%3CLINGO-SUB%20id%3D%22lingo-sub-6726%22%20slang%3D%22en-US%22%3ERe%3A%20User%20termination%20process%20regarding%20mails%20and%20data%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-6726%22%20slang%3D%22en-US%22%3E%3CP%3EI%20wrote%20about%20the%20process%20that%20you%20might%20care%20to%20follow%20some%20time%20ago%20at%20%3CA%20href%3D%22http%3A%2F%2Fwindowsitpro.com%2Fblog%2Fsecuring-exchange-online-mailbox-after-employee-fired%22%20target%3D%22_blank%22%20rel%3D%22nofollow%20noopener%20noreferrer%20noopener%20noreferrer%22%3Ehttp%3A%2F%2Fwindowsitpro.com%2Fblog%2Fsecuring-exchange-online-mailbox-after-employee-fired%3C%2FA%3E.%20You%20might%20find%20the%20information%20presented%20there%20valuable.%20We%20also%20cover%20the%20topic%20in%20more%20depth%20in%20the%20Office%20365%20for%20IT%20Pros%20ebook%20(%3CA%20href%3D%22https%3A%2F%2Fexchangeserverpro.com%2Febooks%2Foffice-365-for-it-pros%2F%22%20target%3D%22_blank%22%20rel%3D%22nofollow%20noopener%20noreferrer%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Fexchangeserverpro.com%2Febooks%2Foffice-365-for-it-pros%2F%3C%2FA%3E)%20because%20there%20is%20much%20more%20to%20think%20about%20than%20Exchange%20mailbox%20data%20such%20as%20the%20user's%20OneDrive%20for%20Business%20site%2C%20any%20other%20SharePoint%20Onine%20sites%20that%20they%20own%2Fadminister%2C%20even%20things%20like%20Sways%20they%20have%20authored%20and%20the%20blog%20they%20might%20have%20written%20through%20Delve.%20Basically%2C%20this%20is%20a%20complicated%20area%20that%20will%20differ%20from%20company%20to%20company%20depending%20on%20how%20you%20use%20Office%20365.%20You%20have%20to%20figure%20out%20where%20users%20generate%20data%2C%20how%20that%20data%20is%20managed%2C%20and%20how%20it%20can%20be%20captured%2Fpreserved%20when%20users%20leave%20(for%20one%20reason%20or%20another).%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3ETR%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-6725%22%20slang%3D%22en-US%22%3ERe%3A%20User%20termination%20process%20regarding%20mails%20and%20data%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-6725%22%20slang%3D%22en-US%22%3E%3CP%3EWe're%20in%20the%20same%20situation.%20Strange%20that%20MS%20hasn't%20any%20good%20solution%20to%20user%20termination.%20The%20%22Solution%22%20suggested%20in%20this%20tread%20is%20no%20solution%20it's%20a%20workaround.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EWe%20would%20like%20to%20take%20away%20the%20user%20from%20global%20address%20book%20and%20block%20email%20to%20his%20account.%20And%20later%2C%20say%20days%20or%20weeks%2C%26nbsp%3B%20backup%20the%20mail%20file%20and%20terminate%20the%20account.%20Sometimes%20the%20account%20is%20terminated%20in%20error%20and%20has%20to%20be%20restored%20quickly%20so%20a%20grace%20period%20is%20needed%20before%20complete%20delete.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-6442%22%20slang%3D%22en-US%22%3ERe%3A%20User%20termination%20process%20regarding%20mails%20and%20data%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-6442%22%20slang%3D%22en-US%22%3EI'd%20script%20as%20much%20of%20this%20as%20you%20can%20with%20PowerShell%2C%20it%20will%20make%20having%20to%20click%20around%20various%20GUIs%20a%20lot%20easier.%20Of%20course%20you're%20stuck%20when%20it%20comes%20to%20exporting%20PST%20and%20PowerShell%20as%20I%20don't%20believe%20MS%20have%20enabled%20this%20feature%20yet%2C%20although%20it%20is%20available%20in%20on-premise%20Exchange.%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-6436%22%20slang%3D%22en-US%22%3ERe%3A%20User%20termination%20process%20regarding%20mails%20and%20data%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-6436%22%20slang%3D%22en-US%22%3E%3CP%3EVadivelu%2C%20thanks%20for%20the%20references.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3ERob%2C%20yes%20and%20I%20really%20think%20it%20should%20be%20automated%20sequence%2C%20since%20I%20am%20working%20in%20entertainment%20industry%2C%20and%20in%20this%20field%2C%20we%20have%20many%20project%20based%20employees.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EMany%20employees%20come%20and%20work%20around%203~6month%20and%20leave%2C%20leaving%20many%20emails%20and%20data.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EIf%20I%20have%20to%20do%20this%20everytime%20they%20leave..%20wow.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-6434%22%20slang%3D%22en-US%22%3ERe%3A%20User%20termination%20process%20regarding%20mails%20and%20data%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-6434%22%20slang%3D%22en-US%22%3ENo%20problem%2C%20and%20yes%20there%20is%20always%20room%20for%20improvement.%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-6433%22%20slang%3D%22en-US%22%3ERe%3A%20User%20termination%20process%20regarding%20mails%20and%20data%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-6433%22%20slang%3D%22en-US%22%3E%3CP%3EThanks%20Rob.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EThat%20was%20the%20proceedure%20I%20took.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EBut%20still%2C%20I%20think%20it%20should%20be%20much%20simpler%20than%20this.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-6432%22%20slang%3D%22en-US%22%3ERe%3A%20User%20termination%20process%20regarding%20mails%20and%20data%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-6432%22%20slang%3D%22en-US%22%3E%3CP%3EYes.%20You%20have%20option%20to%20seach%20the%20content%20inside%20the%20terminated%20user%20mailbox.%20Find%20the%20below%20link%20for%20detailed%20information.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Fsupport.office.com%2Fen-us%2Farticle%2FOffboard-a-user-from-Office-365-for-Business-44d96212-4d90-4027-9aa9-a95eddb367d1%3Fui%3Den-US%26amp%3Brs%3Den-US%26amp%3Bad%3DUS%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Fsupport.office.com%2Fen-us%2Farticle%2FOffboard-a-user-from-Office-365-for-Business-44d96212-4d90-4027-9aa9-a95eddb367d1%3Fui%3Den-US%26amp%3Brs%3Den-US%26amp%3Bad%3DUS%3C%2FA%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EFor%20OD4B.%3C%2FP%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Fsupport.microsoft.com%2Fen-in%2Fkb%2F3042522%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Fsupport.microsoft.com%2Fen-in%2Fkb%2F3042522%3C%2FA%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-6429%22%20slang%3D%22en-US%22%3ERe%3A%20User%20termination%20process%20regarding%20mails%20and%20data%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-6429%22%20slang%3D%22en-US%22%3EThe%20email%20backup%20process%20(PST)%20you%20mention%20is%20the%20only%20way%20to%20do%20this%20in%20o365%20at%20the%20moment.%20Be%20cautious%20removing%20a%20license%20from%20a%20user%20as%20this%20will%20usually%20de-provision%20the%20mailbox%20of%20that%20user.%20Better%20to%20block%20the%20user%20when%20they%20leave%20then%20migrate%20the%20data%20off%20etc.%20With%20ODfB%20you%20can%20add%20a%20administration%20user%20to%20the%20users%20ODfB%20account%2C%20a%20simple%20user%20guide%20here%20-%20%3CA%20href%3D%22http%3A%2F%2Fwww.eugenedauphin.com%2F2015%2F01%2Fget-administrative-access-onedrive-business-environment-user%2F%22%20target%3D%22_blank%22%20rel%3D%22nofollow%20noopener%20noreferrer%20noopener%20noreferrer%22%3Ehttp%3A%2F%2Fwww.eugenedauphin.com%2F2015%2F01%2Fget-administrative-access-onedrive-business-environment-user%2F%3C%2FA%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-6425%22%20slang%3D%22en-US%22%3ERe%3A%20User%20termination%20process%20regarding%20mails%20and%20data%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-6425%22%20slang%3D%22en-US%22%3EThanks.%20But%20what%20if%20datas%20that%20not%20stored%20in%20o365%20groups%3F%20Who%20and%20how%20can%20access%20to%20terminated%20user's%20OD4B%3F%3CBR%20%2F%3E%3CBR%20%2F%3EAnd%20what%20about%20mail%3F%20Do%20I%20hv%20any%20options%20to%20get%20archive%3F%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-6424%22%20slang%3D%22en-US%22%3ERe%3A%20User%20termination%20process%20regarding%20mails%20and%20data%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-6424%22%20slang%3D%22en-US%22%3E%3CP%3E%3CSPAN%20class%3D%22%22%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F5635%22%20target%3D%22_self%22%3EJuhyun%20Kim%3C%2FA%3E%26nbsp%3BIf%20the%20user%20is%20terminated%2C%20we%20will%20just%20remove%20the%20license%20in%20the%20tenant.%20Remove%20the%20terminated%20user%20from%20office%20365%20groups.%20We%20don't%20advise%20to%20delete%20the%20OD4B%2C%20because%20all%20the%20data%20will%20share%20to%20team%20for%20various%20purpose.%26nbsp%3B%3C%2FSPAN%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E
Highlighted
Frequent Contributor

Im not sure where to ask, but I think it is related to admin's process.

 

When employee leaves, as a admin, I have to delete their account. But before I have to backup their mails and data in onedrive first.

I found it way more complicated than Google works product.

AFAIK, when emplyee leaves I have to follow these steps; please correct me if I am wrong.

 

  1. Block login;
  2. Go to sharepoint admin site, grant access to someone who will be handed terminated employee's data
  3. Go to terminated employee's onedrive
  4. Manual backup
  5. Go to exchange admin site, change terminated emplyee's mailbox to sharedmailbox or grant access permission to someone
  6. Manual backup using PST file.
  7. Delete user account

 

Well, if I may compare to Google works, it is way more complicated. In Google works, if I delete account,

 

  1. they give me options to download(check out) all datas and emails in zip file.

 

Just one step. And it's done.

 

 

Please correct me if Im wrong, cause i am not an IT guy even I manage my tenant. Only reason I am doing this admin job is just becasue I know how to turn on/off computer.

 

 

It is only way to back up terminated account's mail and data? Or is there any simpler way?

10 Replies
Highlighted

Juhyun Kim If the user is terminated, we will just remove the license in the tenant. Remove the terminated user from office 365 groups. We don't advise to delete the OD4B, because all the data will share to team for various purpose. 

 

 

Highlighted
Thanks. But what if datas that not stored in o365 groups? Who and how can access to terminated user's OD4B?

And what about mail? Do I hv any options to get archive?
Highlighted
The email backup process (PST) you mention is the only way to do this in o365 at the moment. Be cautious removing a license from a user as this will usually de-provision the mailbox of that user. Better to block the user when they leave then migrate the data off etc. With ODfB you can add a administration user to the users ODfB account, a simple user guide here - http://www.eugenedauphin.com/2015/01/get-administrative-access-onedrive-business-environment-user/
Highlighted
Solution

Yes. You have option to seach the content inside the terminated user mailbox. Find the below link for detailed information.

 

https://support.office.com/en-us/article/Offboard-a-user-from-Office-365-for-Business-44d96212-4d90-...

 

For OD4B.

https://support.microsoft.com/en-in/kb/3042522

Thanks Rob.

 

That was the proceedure I took.

 

But still, I think it should be much simpler than this.

Highlighted
No problem, and yes there is always room for improvement.
Highlighted

Vadivelu, thanks for the references.

 

Rob, yes and I really think it should be automated sequence, since I am working in entertainment industry, and in this field, we have many project based employees.

 

Many employees come and work around 3~6month and leave, leaving many emails and data.

 

If I have to do this everytime they leave.. wow.

 

 

Highlighted
I'd script as much of this as you can with PowerShell, it will make having to click around various GUIs a lot easier. Of course you're stuck when it comes to exporting PST and PowerShell as I don't believe MS have enabled this feature yet, although it is available in on-premise Exchange.
Highlighted

We're in the same situation. Strange that MS hasn't any good solution to user termination. The "Solution" suggested in this tread is no solution it's a workaround.

 

We would like to take away the user from global address book and block email to his account. And later, say days or weeks,  backup the mail file and terminate the account. Sometimes the account is terminated in error and has to be restored quickly so a grace period is needed before complete delete.

Highlighted

I wrote about the process that you might care to follow some time ago at http://windowsitpro.com/blog/securing-exchange-online-mailbox-after-employee-fired. You might find the information presented there valuable. We also cover the topic in more depth in the Office 365 for IT Pros ebook (https://exchangeserverpro.com/ebooks/office-365-for-it-pros/) because there is much more to think about than Exchange mailbox data such as the user's OneDrive for Business site, any other SharePoint Onine sites that they own/administer, even things like Sways they have authored and the blog they might have written through Delve. Basically, this is a complicated area that will differ from company to company depending on how you use Office 365. You have to figure out where users generate data, how that data is managed, and how it can be captured/preserved when users leave (for one reason or another).

 

TR