Removing a user from O365 and AD

This is a step-by-step process for removing a user from O365 and AD

February 6, 2025 By Nick Renwick

In this example we are going to use a RHASS test user.

To delete a user in O365 we need to; remove licenses, convert the user to a shared mailbox, assign permissions to that mailbox, configure auto-replies, rename user, remove them from any groups.

Then in AD, we need to; remove any groups from the user, 'un-protect' the object, disable the user and move the user to the disabled users OU group.

1

Log into O365 and search and click on your user.

Step #2: First Click on 'Sign out of all sessions.' Then 'Block sign-in' — First Click on 'Sign out of all sessions.'
Then 'Block sign-in'

Step #3: Next click on "Delete user" — Next click on "Delete user"

Step #4: Depending on how licensed, by default select 'Remove the licenses from the subscription and reduce costs' — Depending on how licensed, by default select 'Remove the licenses from the subscription and reduce costs'

Step #5: Untick "Make their email aliases available immediately" — Untick "Make their email aliases available immediately"

Step #6: Select "Give another user access to this users email" — Select "Give another user access to this users email"

Step #7: Select "Required : Give email access to another user" — Select "Required : Give email access to another user"

Step #8: Search for wsadmin — Search for wsadmin

Step #9: Click on "Why Settle Admin" — Click on "Why Settle Admin"

Step #10: Click on "Create a new display name" — Click on "Create a new display name"

Step #11: Add "(Archived)" to the end of their username — Add "(Archived)" to the end of their username

Step #12: Click on "Next" — Click on "Next"

Step #13: If they've requested automatic replies, you can enable this feature. — If they've requested automatic replies, you can enable this feature.

Step #14: We will keep the email aliases as they are. This ensures that if someone external emails an alias previously set up, it will still work and go to the shared mailbox unless it has been requested to be reassigned to someone else or removed. — We will keep the email aliases as they are. This ensures that if someone external emails an alias previously set up, it will still work and go to the shared mailbox unless it has been requested to be reassigned to someone else or removed.

Step #15: Review steps — Review steps

Step #16: Click on "Transfer ownership" — Click on "Transfer ownership"

Step #17: Click on "Assign and convert" — Click on "Assign and convert"

Step #18: Wait for it to complete — Wait for it to complete

Step #19: Refresh the page, and click back into the user, which should now say '(Archived) — Refresh the page, and click back into the user, which should now say '(Archived)

Step #20: Select 'Manage Groups' — Select 'Manage Groups'

21

Take a screenshot or note of any groups the user is a member of to put in Autotask ticket.

Step #22: Select all groups, and click 'Remove' — Select all groups, and click 'Remove'

Step #23: Confirm removal, Click 'Yes' — Confirm removal, Click 'Yes'

Step #24: Navigate to 'Shared Mailbox's' — Navigate to 'Shared Mailbox's'

Step #25: Find and click on your userSelect 'Edit' under 'Show in global address list' — Find and click on your user
Select 'Edit' under 'Show in global address list'

Step #26: Untick 'Show in my organization's global address listClick 'Save' — Untick 'Show in my organization's global address list
Click 'Save'

Step #27: Hop onto the sites Domain controller, in this case RHASSDC-02Open 'Active Directory' — Hop onto the sites Domain controller, in this case RHASSDC-02
Open 'Active Directory'

Step #28: Find the user in AD — Find the user in AD

Step #29: Right-click on user — Right-click on user

Step #30: Click on "Properties" — Click on "Properties"

Step #31: First, if they are a member of any groups, we need to remove them.Click on "Member Of" — First, if they are a member of any groups, we need to remove them.
Click on "Member Of"

32

Take a note, or screenshot of the users groups. Add this to your Autotask ticket for reference.

Step #33: Select all groups (other than domain user), then Click on "Remove" — Select all groups (other than domain user), then Click on "Remove"

Step #34: Click on "Yes" — Click on "Yes"

Step #35: Click on "Apply" — Click on "Apply"

Step #36: Then, go into 'Object' — Then, go into 'Object'

Step #37: Uncheck the 'Protect object from accidental deletion.' — Uncheck the 'Protect object from accidental deletion.'

Step #38: Click on "OK" — Click on "OK"

Step #39: Right click on the user and select "Disable Account" — Right click on the user and select "Disable Account"

Step #40: Click on "OK" — Click on "OK"

Step #41: Finally drag the user into Disabled Users OU folder. — Finally drag the user into Disabled Users OU folder.

Step #42: Click on "Yes" to move. — Click on "Yes" to move.

Job done.
Log the ticket and email back whoever requested the users removal.