IT offboarding: deactivating accounts, access and licences safely

When employees leave the company, IT teams face a critical task: every device has to come back, access has to be switched off and licences have to be reassigned. Incomplete IT offboarding does not just endanger security — it costs real money.

Why IT offboarding matters so much

According to Oomnitza’s State of Offboarding Process Automation Report — a YouGov survey of 213 senior IT professionals — 49% of enterprises lose at least 5% of their technology assets when offboarding, and 27% lose more than 10%. Smaller companies fare no better: spreadsheets, verbal handovers and missing return records mean devices disappear and accounts stay active.

A professional IT offboarding process protects you from:

• Security risks:Former employees keep access to email, cloud storage and internal systems
• Compliance breaches:The GDPR requires personal data to be handled correctly after someone leaves
• Loss of assets:Laptops, monitors and peripherals that never come back add up fast
• Wasted licences:Software licences stay assigned to inactive users

The seven-point IT offboarding checklist

1. Take stock of the devices:Get a complete picture of every asset assigned to the employee — laptop, phone, headset, monitor, docking station, charging cable. With ITAM software such as AssetNode you see every assignment at a glance.
2. Schedule the return:Fix a concrete date for handing the devices back — ideally the last working day. Produce a handover record with serial numbers and a note on condition.
3. Switch off access:Systematically disable the email account (Microsoft 365, Google Workspace), MDM profiles (Intune, Jamf, Kandji), VPN access, the password manager and any SCIM-provisioned accounts.
4. Reassign licences:Check which software licences were assigned to the employee. Transfer them to a successor or release them.
5. Back up and clean the data:Secure the relevant work data before wiping the device. Delete personal data in line with the GDPR and record it in the audit log.
6. Reset the device:Perform a factory reset — remotely via Intune or Jamf for MDM-managed devices. Then assign it to the new employee or release it to the marketplace for disposal.
7. Document the offboarding:Record the return date, device condition, disabled access and released licences in the audit trail. For ISO 27001-certified companies this is mandatory.

What does poor IT offboarding cost?

The cost of unstructured offboarding can be put in concrete numbers:

Sources: manufacturer list prices for business laptops and software subscriptions, September 2026; IBM Cost of a Data Breach Report 2026, average for Germany. A single forgotten admin account can be enough to expose the entire IT infrastructure.

How AssetNode automates IT offboarding

AssetNode simplifies the offboarding process through three core features:

• A single assignment overview:Every asset assigned to an employee (hardware, licences, peripherals) at a glance
• Automatic MDM synchronisation:Device status is updated in real time from Intune, Jamf and Kandji
• Audit trail:Every device return and change of condition is logged automatically

Conclusion

IT offboarding is not a nice-to-have — it is a critical security and compliance process. With a clear checklist and the right ITAM software you make sure that when someone leaves, no device goes missing, no access stays live and no licence is wasted.

And the other half of a departure: the checklist for getting laptop and accessories back →