Skip to content
18 changes: 18 additions & 0 deletions microsoft-365/admin/add-users/remove-former-employee-step-1.md
Original file line number Diff line number Diff line change
Expand Up @@ -32,6 +32,24 @@ search.appverid:
description: "Global administrators can block a former employee from logging in and block their access to Microsoft 365 services."
---

## What you need to know about terminating an employee's email session

The following information explains how to remove an employee from the organization's email (Exchange):

|What you can do|How you do it|
|:-----|:-----|
|Terminate a session (such as Outlook on the web, Outlook, or Exchange active sync) and force them to open a new session.|Reset password.|
|Terminate a session and block access to future sessions (for all protocols).|Disable the account, for example, in the Exchange admin center or using PowerShell: <p> `Set-Mailbox user@contoso.com -AccountDisabled:$true`.|
|Terminate the session for a particular protocol (such as ActiveSync).|Disable the protocol, for example, in the Exchange admin center or using PowerShell: <p> `Set-CASMailbox user@contoso.com -ActiveSyncEnabled:$false`.|

These operations can be done in three different places:

|If you terminate the session here|How long does it take|
|---|---|
|In the Exchange admin center or using PowerShell.|Expected delay is approximately 30 minutes.|
|In the Azure Active Directory admin center.|Expected delay is 60 minutes.|
|In an on-premises environment.|Expected delay is 3 hours or more.|

# Step 1 - Prevent a former employee from logging in and block access to Microsoft 365 services

If you need to immediately prevent a user's sign-in access, you should reset their password. In this step, force a sign out of the user from Microsoft 365.
Expand Down