diff --git a/microsoft-365/admin/add-users/remove-former-employee-step-1.md b/microsoft-365/admin/add-users/remove-former-employee-step-1.md index b69e9f99c60..2b363927be9 100644 --- a/microsoft-365/admin/add-users/remove-former-employee-step-1.md +++ b/microsoft-365/admin/add-users/remove-former-employee-step-1.md @@ -32,6 +32,24 @@ search.appverid: description: "Global administrators can block a former employee from logging in and block their access to Microsoft 365 services." --- +## What you need to know about terminating an employee's email session + +The following information explains how to remove an employee from the organization's email (Exchange): + +|What you can do|How you do it| +|:-----|:-----| +|Terminate a session (such as Outlook on the web, Outlook, or Exchange active sync) and force them to open a new session.|Reset password.| +|Terminate a session and block access to future sessions (for all protocols).|Disable the account, for example, in the Exchange admin center or using PowerShell:
`Set-Mailbox user@contoso.com -AccountDisabled:$true`.| +|Terminate the session for a particular protocol (such as ActiveSync).|Disable the protocol, for example, in the Exchange admin center or using PowerShell:
`Set-CASMailbox user@contoso.com -ActiveSyncEnabled:$false`.| + +These operations can be done in three different places: + +|If you terminate the session here|How long does it take| +|---|---| +|In the Exchange admin center or using PowerShell.|Expected delay is approximately 30 minutes.| +|In the Azure Active Directory admin center.|Expected delay is 60 minutes.| +|In an on-premises environment.|Expected delay is 3 hours or more.| + # Step 1 - Prevent a former employee from logging in and block access to Microsoft 365 services If you need to immediately prevent a user's sign-in access, you should reset their password. In this step, force a sign out of the user from Microsoft 365.