DISABLE USER ACCOUNT PROCEDURE
People and Culture submits Freshdesk tickets asking to disable employee access.
- In Azure AD, add the user to the “Users on Leave” group.
- Sign the user out of all sessions in 365 Admin Center / Revoke sessions in Azure AD.
- Set all logon hours to “Denied” in local AD
- To give the user back their access, remove the user to the “Users on Leave” group, and set all logon hours to “Permitted”.