How To Deactivate Office 365
Office 365: Uninstalling Office and Deactivating Licenses. Last updated Monday, Feb. 25, 2019, at 11:53 a.m. If you decide to discontinue the use of one of your devices, get a new one, or decide you no longer want Microsoft Office installed, you can uninstall the applications and make available one of your free licenses to use on another device. Office 365 can be used on up to five computers. If you would like to install Office on a sixth computer, you would first need to deactivate a previous installation. Please note that you won’t be able to use many of its features after the product has been deactivated. If you are using Office 365 or the latest version of Microsoft Office products, you might have noticed the AutoSave feature. The document keeps saving automatically in the background. The idea of auto-saving is to protect your document from sudden power off of the computer, PC crash or not manually saving the file after doing your important work.
-->Sign out now!
Tip
Need help with the steps in this topic? We’ve got you covered. Make an appointment at your local Microsoft Store with an Answer Desk expert to help resolve your issue. Go to the Microsoft Stores page and choose your location to schedule an appointment.
If you need to get an employee out of Office 365 immediately, here's what you do:
- Go to the Office 365 admin center.
In the Microsoft 365 admin center, select User management, choose the user, and reset their password (don't send it to them).
Choose the user again to go to their properties page, go to the OneDrive tab, and then choose Initiate sign-out under Sign-out.
Within an hour - or after they click out of the current Office 365 page they are on - they will be prompted to sign in again. (The refresh token is good for an hour, so the timeline depends on how much time is left on their token and whether they navigate out of their current webpage.)
CAVEAT: If the user is in Outlook on the web, just clicking around in their mailbox, they may not be kicked out immediately. As soon as they click a different tile, such as OneDrive, or refresh their browser, the sign out is initiated.
To use PowerShell to sign out a user immediately, see Revoke-AzureADUserAllRefreshToken cmdlet.
For more information about how long it takes to get someone out of email, see What you need to know about terminating an employee's email session.
Overview of all the steps to remove an employee and secure data
A question we often get is, 'What should I do to protect data when an employee leaves the organization?' This article explains how to block access to Office 365 and the steps you should take to secure your data.
Note
If you are a global administrator you can delete the employee, forward their email, choose what to do with their OneDrive content using the new guided experience. For more information, see Global admin: Delete a user. However, we recommend completing all of the additional steps listed here to ensure the employee doesn't have access to your company's data.
Here's a quick overview. Each step is explained in detail in this article.
Step | Why do this |
1. Save the contents of a former employee's mailbox | This is useful for the person who is going to take over the employee's work, or in case of litigation. |
2. Forward a former employee's email to another employee or convert to a shared mailbox | This lets you keep the former employee's email address active. If you have customers or partners still sending email to the former employee's address, this gets them to the person taking over the work. |
3. Wipe and block a former employee's mobile device | Removes your business data from the phone or tablet. |
4. Block a former employee's access to Office 365 data | It prevents the person from accessing their old Office 365 mailbox and data. Tip: When you block a user's access, you're still paying for their license. You have to delete the license from your subscription to stop paying for it (step 5). |
5. Move the employee's OneDrive content | If you only remove a user's license but don't delete the account, the content in the user's OneDrive will remain accessible to you even after 30 days. Before you delete the account, you should move the content of their OneDrive to another location that's easy for you to access. After you delete an employee's account, the content in their OneDrive is retained for 30 days. During that 30 days, however, you can restore the user's account, and gain access to their OneDrive content. If you restore the user's account, the OneDrive content will remain accessible to you even after 30 days. |
5a. What if the person used their personal computer to access OneDrive and SharePoint? | If they used a personal computer instead of a company-issued computer to download files from OneDrive and SharePoint, there's no way for you to wipe those files they stored. They will continue to have access to any files that were synced to their computer. |
6. Remove and delete the Office 365 license from a former employee | When you remove a license, you can assign it to someone else. Or, you can delete the license so you don't pay for it until you hire another person. When you remove or delete a license, the user's old email, contacts, and calendar are retained for 30 days, then permanently deleted. If you remove or delete a license but don't delete the account, the content in the user's OneDrive will remain accessible to you even after 30 days. |
7. Delete a former employee's user account | This removes the account from your Microsoft 365 admin center. Keeps things clean. |
Save the contents of a former employee's mailbox
There are two ways you can save the contents of the former employee's mailbox:
Add the former employee's email address to your version of Outlook 2013 or 2016, and then export the data to a .pst file. You can import the data to another email account as needed. To learn how to do this, see Get access to and back up a former user's data.
OR
Place a Litigation Hold or In-Place Hold on the mailbox before the deleting the user account. This is much more complicated than the first option but worth doing if: your Enterprise plan includes archiving and legal hold, litigation is a possibility, and you have a technically strong IT department.
Once you convert the mailbox to an 'inactive mailbox,' administrators, compliance officers, or records managers can use In-Place eDiscovery tools in Exchange Online to access and search the contents.
Inactive mailboxes can't receive email and aren't displayed in your organization's shared address book or other lists.
To learn how to place a hold on a mailbox, see Manage inactive mailboxes in Exchange Online.
Forward a former employee's email to another employee or convert to a shared mailbox
In this step, you assign the former employee's email address to another employee, or convert the user's mailbox to a shared mailbox that you've created.
Creating a shared mailbox is the less expensive way to go because you won't have to pay for a license as long as the mailbox is smaller than 50GB. Over 50GB and you'll need to assign a license to it.
If you convert the mailbox to a shared mailbox, all the old email will be available, too. This can take up a lot of space.
If you set up email forwarding, only new emails sent to the former employee will now be sent to the current employee.
Email forwarding requires that the former employee's account has a license.
Important
If you're setting up email forwarding or a shared mailbox, at the end, don't delete the former employee's account. The account needs to be there to anchor the email forwarding or shared mailbox.
- Go to the Office 365 admin center.
In the Microsoft 365 admin center, select User management.
Choose the employee that you want to block and select the Mail tab.
Under Email Forwarding choose Manage email forwarding.
Turn on Forward all email sent to this mailbox. In the Forwarding address box, type the email address of the current employee (or shared mailbox) who's going to get the email.
Choose Save.
Remember, don't delete the former employee's account.
Wipe and block a former employee's mobile device
If your former employee had a organization phone, you can use the Exchange admin center to wipe and block that device so that all organization data is removed from the device and it can no longer connect to Office 365.
- Go to the Microsoft 365 admin center.
- Go to the Office 365 admin center.
In the Microsoft 365 admin center, in the lower-left navigation pane, expand Admin centers and select Exchange.
Your screen might look like one of the following images:
In the Exchange admin center, navigate to Recipients > Mailboxes.
Select the user, and under Mobile Devices, choose View details.
On the Mobile Device Details page, under Mobile devices, select the mobile device, click Wipe Data, and then click Block.
Click Save.
Tip: Be sure you remove or disable the user from your on-premises Blackberry Enterprise Service. You should also disable any Blackberry devices for the user. Refer to the Blackberry Business Cloud Services Administration Guide if you need specific steps on how to disable the user.
Block a former employee's access to Office 365 data
Important
Blocking an account can take up to 24 hours to take effect. If you need to immediately prevent a user's sign-in access, you should reset their password and then initiate a one-time event that will sign them out of Office 365 sessions across all devices. See Sign out now!
To block a user from signing in and accessing Office 365 data:
- Go to the Office 365 admin center.
In the Microsoft 365 admin center, select User management.
Select the employee that you want to block, and under the user's name, choose the symbol for Edit sign-in status.
Select Block the user from signing in and then Save.
Block a former employee's access to email (Exchange Online)
Deactivate Microsoft Office 2010
If you have Office 365 email as part of your Office 365 subscription, you need to log in to the Exchange admin center to follow these steps to block your former employee from accessing their email.
- Go to the Microsoft 365 admin center.
- Go to the Office 365 admin center.
In the Microsoft 365 admin center, in the lower-left navigation pane, expand Admin centers and select Exchange.
Your screen might look like one of the following images:
In the Exchange admin center, navigate to Recipients > Mailboxes.
Double-click the user and go to the Mailbox features page. Under Mobile Devices, click Disable Exchange ActiveSync and Disable OWA for Devices, and answer Yes to both when prompted.
Under Email Connectivity, click Disable and answer Yes when prompted.
Remove and delete the Office 365 license from a former employee
So you don't continue paying for a license after someone leaves your organization, you need to remove their Office 365 license and then delete it from your subscription. If you choose not to delete the license from your subscription, you can assign it to another user.
When you remove the license, all that user's data is held for 30 days. You can access the data, or restore the account if the user comes back. After 30 days, all the user's data (except for documents stored on SharePoint Online) is deleted permanently from Office 365 and can't be recovered.
- Go to the Office 365 admin center.
In the Microsoft 365 admin center, select User management.
Select the employee that you want to block, and then choose Licenses and Apps.
On the Licenses and Apps page, un-check the box next to the subscription to remove the license and click Save changes.
To reduce the number of licenses you're paying for until you hire another person, do the following:
In the Microsoft 365 admin center, go to Billing > Products & services page.
Choose Add/Remove licenses to delete the license so you don't pay for it until you hire another person.
When you add another person to your business, you'll be prompted to buy a license at the same time, with just one click!
For more information about managing user licenses for Office 365 for business, see Assign licenses to users in Office 365 for business, and Remove licenses from users in Office 365 for business.
How the deleted employee account affects Skype for Business
When you remove a user's license from Office 365, the PSTN calling number associated with the user will be released. You can assign it to another user.
If the user belongs to a queue group, they will no longer be a viable target of the call queue agents. So, we recommend also removing the user from the groups associated with the call queue.
Delete a former employee's user account
After you've saved and accessed all the former employee's user data, you can delete the former employee's account.
- Don't delete the account if you've set up email forwarding or converted it to a shared mailbox. Both need the account to anchor the forwarding or shared mailbox.
- Go to the Microsoft 365 admin center.
- Go to the Office 365 admin center.
In the Admin center, select User management.
Select the employee that you want to delete, and then under the user's name, choose the symbol for Delete user. Choose the options you want for this user, and then choose Delete user.
When you delete a user, the account becomes inactive for approximately 30 days. You have until then to restore the account before it is permanently deleted.
Does your organization use Active Directory?
If your organization synchronizes user accounts to Office 365 from a local Active Directory environment, you must delete and restore those user accounts in your local Active Directory service. You can't delete or restore them in Office 365.
For instructions, see this article: Delete a User Account.
If you are using Azure Active Directory, see the Remove-MsolUser PowerShell cmdlet.
What you need to know about terminating an employee's email session
Here's information about how to get an employee out of email (Exchange).
What you can do | How you do it |
Terminate a session (such as Outlook on the web, Outlook, Exchange active sync, etc.) and force to open a new session | Reset password |
Terminate a session and block access to future sessions (for all protocols) | Disable the account. For example (in the Exchange admin center or using PowerShell): Set-Mailbox user@contoso.com -AccountDisabled:$true |
Terminate the session for a particular protocol (such as ActiveSync) | Disable the protocol. For example (in the Exchange admin center or using PowerShell): Set-CASMailbox user@contoso.com -ActiveSyncEnabled:$false |
The above operations can be done in 3 places:
If you terminate the session here | How long it takes |
In the Exchange admin center or using PowerShell | Expected delay is within 30 min |
In the Azure Active Directory admin center | Expected delay is 60 min |
In an on-premises environment | Expected delay is 3 hours or more |
How to get fastest response for account termination
Fastest: Use the Exchange admin center (use PowerShell) or Azure Active Directory admin center. In an on-premises environment, it can take several hours to sync the change through DirSync.
Fastest for a user with presence on-premises and in the Exchange Datacenter: Terminate the session using Azure Active Directory admin center/Exchange admin center AND make the change in the on-premises environment as well. Otherwise, the change in Azure Active Directory admin center/Exchange admin center will be overwritten by DirSync.
Related Topics
Office 365 offers a degree of convenience in that you can easily install the desktop and mobile apps to use with your account on a number of devices. But if you're new to the service, it's not immediately apparent how you go about managing what you've got installed and where.
Here's what you need to know.
The first thing you'll want to do with any Office 365 subscription is install the desktop apps to your Windows PC or Mac. How many different computers you can use depends on which subscription you have. The personal subscription, for example, only allows one desktop install. The home subscription allows five. Here's how you go about getting the apps:
- Navigate to Office.com in your browser
- Click on 'My account' and sign in with the Microsoft account your Office 365 subscription is attached to
- Click 'Install'
You'll then get an installer on your PC that will do all the work for you. Simple!
If you want to install the 64-bit version of Office (32-bit is the recommended default) or install it in a different language, simply click on 'Language and install options' and choose your preferred language.
64-bit Office will then be found under 'Advanced install options,' available to select in the dropdown box presented. This is also where you'll see options to install the Office 2016 preview if you want that instead.
Managing installs
Regardless of your subscription tier you'll have an upper limit on how many times you can install the Office desktop apps. Your account management page will show you which devices you're currently using an install on and how many you have available.
If you're out of installs and need to install the desktop apps elsewhere, you first need to deactivate one of your current ones.
In the same screen you should see an option highlighted in blue next to each install, specifically beneath the date you installed on each computer. Just click it and follow any on-screen prompts to free up a slot to move to another computer.
Other devices
Office 365 subscriptions also allow you to install on a certain number of tablets. This includes Android and iPad, with each taking up a 'tablet' slot against your account.
Any activations on these devices can be managed in this section in much the same way as desktop installs.
Payment and billing
If you're using a free subscription then you won't have yet handed over any payment information. But, come the end of your 12-months you'll be asked to end or continue your subscription.
The payment and billing part of your account is where you keep track of exactly when your subscription year ends and whether or not you're set up for an automatic renewal.
At any point in your subscription you can set up an auto-renewal option so you don't have to worry about remembering to pay if you intend to keep the service on for another year. Just look for 'Set up an auto-renew subscription' towards the bottom of the page.
Just below this there is also an option to 'Renew with an Office product key.' If you have a key, perhaps through purchasing an Office 365 voucher in a store, this is where you'll need to redeem it. Click the link, enter the code in the box that appears and you're set.
Thankfully Microsoft makes managing your Office 365 subscription super easy. It can be a little confusing at first, but with everything well presented and in one place you'll soon get to grips with it.
Comments are closed.