Prevent ex-employees from accessing downloaded data when they are no longer in company

%3CLINGO-SUB%20id%3D%22lingo-sub-1343012%22%20slang%3D%22en-US%22%3EPrevent%20ex-employees%20from%20accessing%20downloaded%20data%20when%20they%20are%20no%20longer%20in%20company%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1343012%22%20slang%3D%22en-US%22%3E%3CP%3EHi%2C%3CBR%20%2F%3Emost%20of%20our%20users%20have%20installed%20the%20O365%20mobile%20app%20on%20their%20own%20mobile%20devices%20or%20a%20personal%20laptop%2C%20such%20as%20Outlook%2C%20Skype%20for%20business%2C%20OneDrive%2C%20SharePoint%2C%20Teams.%3CBR%20%2F%3EWhen%20the%20user%20leaves%20the%20company%2C%20we%20will%20change%20their%20O365%20password%20immediately%2C%20suppose%20they%20cannot%20receive%20any%20new%20message%20or%20files.%3CBR%20%2F%3E%3CBR%20%2F%3EHowever%2C%20how%20about%20the%20OLD%20record%20on%20their%20mobile%20devices%3F%20Seems%20if%20the%20user%20has%20used%20Outlook%20to%20access%20company%20email%20before%2C%20the%20OLD%20mailbox%20history%20is%20downloaded%20in%20their%20own%20devices.%20Even%20we%20changed%20the%20password%2C%20they%20can%20still%20able%20to%20access%20the%20downloaded%20record.%20It%20will%20create%20some%20security%20issues.%20I%20am%20not%20sure%20how%20about%20OneDrive%2C%20S4B%2C%20SharePoint%2C%20TEAMS%2C%20are%20they%20also%20saved%20old%20files%2Fmessages%20in%20their%20mobile%20devices%20and%20they%20are%20still%20able%20to%20access%20their%20old%20record%3F%3CBR%20%2F%3E%3CBR%20%2F%3EDo%20we%20have%20any%20methods%20to%20prevent%20the%20user%20to%20access%20the%20old%20record%20on%20their%20own%20mobile%20devices%3F%3C%2FP%3E%3CP%3EKind%20regards%2C%3C%2FP%3E%3CP%3EDino%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-1343012%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3EOffice%20365%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EOutlook%20for%20Android%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EOutlook%20for%20iOS%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EOutlook%20for%20Windows%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1343108%22%20slang%3D%22en-US%22%3ERe%3A%20Prevent%20ex-employees%20from%20accessing%20downloaded%20data%20when%20they%20are%20no%20longer%20in%20company%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1343108%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F390770%22%20target%3D%22_blank%22%3E%40DiVojich%3C%2FA%3E%26nbsp%3BStart%20here%3A%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%3CSTRONG%3EMicrosoft%20Intune%20is%20an%20MDM%20and%20MAM%20provider%20for%20your%20devices%3C%2FSTRONG%3E%3C%2FP%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fsv-se%2Fmem%2Fintune%2Ffundamentals%2Fwhat-is-intune%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Fdocs.microsoft.com%2Fsv-se%2Fmem%2Fintune%2Ffundamentals%2Fwhat-is-intune%3C%2FA%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%3CSTRONG%3ECapabilities%20of%20built-in%20Mobile%20Device%20Management%20for%20Microsoft%20365%3C%2FSTRONG%3E%3C%2FP%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Fsupport.microsoft.com%2Fen-us%2Foffice%2Fcapabilities-of-built-in-mobile-device-management-for-microsoft-365-a1da44e5-7475-4992-be91-9ccec25905b0%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Fsupport.microsoft.com%2Fen-us%2Foffice%2Fcapabilities-of-built-in-mobile-device-management-for-microsoft-365-a1da44e5-7475-4992-be91-9ccec25905b0%3C%2FA%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1343167%22%20slang%3D%22en-US%22%3ERe%3A%20Prevent%20ex-employees%20from%20accessing%20downloaded%20data%20when%20they%20are%20no%20longer%20in%20company%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1343167%22%20slang%3D%22en-US%22%3EHi%2C%3CBR%20%2F%3Ethanks%20for%20the%20info.%3CBR%20%2F%3EI%20am%20aware%20of%20Intune%2C%20but%20for%20now%20it%20is%20not%20an%20option.%3CBR%20%2F%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1343180%22%20slang%3D%22en-US%22%3ERe%3A%20Prevent%20ex-employees%20from%20accessing%20downloaded%20data%20when%20they%20are%20no%20longer%20in%20company%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1343180%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F390770%22%20target%3D%22_blank%22%3E%40DiVojich%3C%2FA%3E%26nbsp%3BPerhaps%20the%26nbsp%3Bbuilt-in%20Mobile%20Device%20Management%20for%20Microsoft%20365%20is%20an%20option%20then.%3C%2FP%3E%3C%2FLINGO-BODY%3E
Contributor

Hi,
most of our users have installed the O365 mobile app on their own mobile devices or a personal laptop, such as Outlook, Skype for business, OneDrive, SharePoint, Teams.
When the user leaves the company, we will change their O365 password immediately, suppose they cannot receive any new message or files.

However, how about the OLD record on their mobile devices? Seems if the user has used Outlook to access company email before, the OLD mailbox history is downloaded in their own devices. Even we changed the password, they can still able to access the downloaded record. It will create some security issues. I am not sure how about OneDrive, S4B, SharePoint, TEAMS, are they also saved old files/messages in their mobile devices and they are still able to access their old record?

Do we have any methods to prevent the user to access the old record on their own mobile devices?

Kind regards,

Dino

3 Replies

@DiVojich Start here:

 

Microsoft Intune is an MDM and MAM provider for your devices

https://docs.microsoft.com/sv-se/mem/intune/fundamentals/what-is-intune

 

Capabilities of built-in Mobile Device Management for Microsoft 365

https://support.microsoft.com/en-us/office/capabilities-of-built-in-mobile-device-management-for-mic...

Hi,
thanks for the info.
I am aware of Intune, but for now it is not an option.

@DiVojich Perhaps the built-in Mobile Device Management for Microsoft 365 is an option then.