Employee onboarding

Back to services

A new hire on Monday should have a login, a laptop that is already enrolled, a mailbox, and the SharePoint sites they were promised. Leavers should lose access the same day, including the shared mailbox they were using.

Joiner

• Entra ID account, licence, groups, and MFA enrolment instructions.
• Laptop build from Intune or a known image. Local admin not left on just in case.
• Shared mailboxes and Teams for the role, not a copy of the last person's access.

Mover and leaver

• Role changes update groups the same week, not at the next audit.
• Leaver checklist: sign-in blocked, sessions revoked, device wiped or collected, forwarding set for a named owner, licences reclaimed.