What a Small Business Should Do After an Employee Leaves

When an employee leaves, the business side of offboarding matters just as much as the HR side.

A lot of small companies handle this casually. The account stays active for a few days. The shared passwords never change. The laptop comes back later. The old email account keeps receiving useful messages nobody is watching closely.

That is how small gaps turn into bigger problems.

Start with account access

The first step is simple. Figure out what the person could sign into.

That often includes:

• email
• Microsoft or Google accounts
• password managers
• VPN or remote access
• line-of-business apps
• shared dashboards or billing tools
• Wi-Fi or local admin access in edge cases

If nobody has a clear list, that is already a process problem worth fixing.

Lock down shared access

Shared passwords create drag on a normal day and risk on a bad one.

If an employee knew a shared credential, that password should be reviewed and often rotated. Businesses tend to skip this because it is annoying. It is still the right move.

Recover the device and check it properly

Returned equipment should not just be set on a shelf and forgotten.

Basic checks matter:

• did the device come back at all
• is disk encryption status known
• are local accounts understood
• does the device still have saved sessions or tokens
• does it need to be cleaned up before reassignment

Review email handling

A former employee's mailbox often still receives useful business traffic.

Forwarding, shared mailbox transitions, retention needs, and client communication should all be reviewed instead of improvised.

Remove remote access and admin paths

This is one of the easiest areas to miss.

If the employee had VPN access, remote support access, dashboard admin rights, or any unusual local privilege, those paths need to be turned off or reassigned deliberately.

Document what changed

The best offboarding process leaves a simple record:

• what accounts were disabled
• what passwords or access paths changed
• what equipment was returned
• who now owns important inboxes or systems

That record matters later when a question comes up and nobody remembers the details.

If you are planning a change like this, our Managed IT Services for Small Businesses page explains how Texas 67 scopes the work. You can also read Why Shared Passwords and Personal Email Create Risk for Small Businesses for a closely related example.

Final thought

Employee offboarding is not just a people process. It is an access-control process.

The smoother the business handles accounts, devices, shared passwords, and documentation at departure time, the less likely it is that an old account turns into a future problem.

If your business needs a cleaner offboarding process or better account and device management after staff changes, Texas 67 Systems can help tighten that workflow.

Call 469-907-5567 or text 214-310-5445, or explore Managed IT Services for Small Businesses.

Authority notes from Texas 67 Systems

This section was added to make the guide more useful for real buyers, not just search engines. Access control problems usually show up during stressful moments: a staff change, a lost phone, a shared mailbox problem, a browser full of saved passwords, or an account nobody knows how to recover. Texas 67 focuses on clean ownership, documented access, MFA, and handoff procedures that small businesses can actually maintain.

Texas 67 Systems works with small businesses and homeowners across McKinney, Melissa, Collin County, and nearby North Texas communities. The practical goal is to make technology more stable, more understandable, and easier to support after the initial fix or install.

Practical checklist

• Use business-owned email accounts instead of personal accounts for company systems.
• Turn on MFA for important accounts and document recovery methods.
• Avoid shared passwords when named users or a password manager would be safer.
• Review access when an employee or vendor relationship changes.
• Keep domain, email, website, billing, and device access documented in a controlled place.

Related Texas 67 services and reading

Useful next pages: managed IT services, shared password risk, business email ownership, and employee offboarding checklist.

Frequently asked questions

Why is personal email risky for business systems?

It can make ownership, recovery, billing, and employee transitions harder. Business systems should usually be tied to business-owned accounts.

Is MFA enough by itself?

MFA helps, but it works best with clear account ownership, recovery documentation, and a process for adding and removing access.

Can Texas 67 help organize access without taking over everything?

Yes. The work can start with a practical access review, documentation cleanup, and a prioritized list of fixes.

Next step

If account access, business email, MFA, or employee offboarding feels scattered, contact Texas 67 Systems and start with the systems your business depends on most.