Microsoft Entra Suite Tech Accelerator
Aug 14 2024, 07:00 AM - 09:30 AM (PDT)
Microsoft Tech Community

Disable or delete AD user object?

Copper Contributor

What is recomended or best practise when an employee leaves the buisness, disable the account and keep it "for ever" or delete it after a periode?


Is there any reason you would want to store a User AD object? 

Or is it a good reason for why you should delete it?


Also do GDPR or the privacy law enforce anything regarding this and the employees sensitive information regarding this user object? 


Is there any difference regarding this on AD on-prem and Azure AD?


Thank you!

1 Reply

@he_jac Here's a general "best practice" to get started




You should get familiar with Microsoft Trust Center as well.


It needs to be addressed within your own organization so it's difficult to say "do this and do that".