Jump to CustomersLinton > Linton > StaffLeaving

Staff Leaving

Account changes

• Disable the user's account
• Set a reminder to remove the account in 1 month's time
• Change administrator password
  • Record in the supportal and xemdata

Office365

• Run AzureAD sync

• Check the account is disabled in https://portal.office.com/

G-Suite

• Remove ownership from the Google Project which facilitates user sync
  • Go to https://console.developers.google.com/ and login
  • From the menu choose IAM and admin
  • Click the trash icon next the user to remove the delegation
• Run G-Suite sync

• If getting sync errors, add a -f to the actual sync command to flush the local cache

• Check account is disabled at https://gsuite.google.com/. It may not be depending on the sync settings. If this is the case, manually suspend or delete the account.
• Remove from AD group Access-GoogleApps (the group matched as part of the sync rules)

Fix scheduled tasks for the administrator account:

• Find them all (I'm sure there is a smarter way than this which would also incorporate changing the password)

• Ignoring the Author and Start Menu tasks, you get the list of what needs the new administrator password

xencore:
    "\Backup SQL"
pvscore:
    "\Computer Shutdown"
    "\Computer Shutdown (forced)"
    "\PVS Startup"
    "\VDI update"
dc01:
    "\Microsoft\Windows\Backup\Microsoft-Windows-WindowsBackup"
pvs01:
    "\PVS export disks"
sims:
    "\Export for Oliver"
    "\Export PPI report"
    "\Inventory"
    "\MSSQL backup"
    "\MSSQL backup"
gladstone:
    "\MSSQL backup"

Test accounts

• Change the password for any test accounts
  • teststaff
  • teststudent
  • testuser
• Record the changes in xemdata and \\resources\itsupport$\Test Accounts.txt

Shared accounts

• Disable all exam accounts (were all enabled)
• Disable all visitor accounts (already disabled)
• Disable invigilator account (has an easy to remember password so the lady who does the POP testing can remember it - she needs to be given a new one)
• Change password on supply accounts (send them to Alison Miners)

Papercut

• Check for delegated admin rights on Papercut web interface

Ticketing System

• Check for an admin account on https://tickets.lvc.org/

Phone System

• Everyone is sharing Jackie Bailey's login, so everyone would need to know the new password, or stop using Jackie Bailey's login.

UniFi controllers

• Check for admin accounts on https://unifi:8443 and https://video:7443