1 min read
Spring cleaning for Active Directory and Entra ID
Disable stale accounts, reclaim licenses, and shrink attack surface before summer projects start.
Stale accounts are free gifts to attackers, and paid licenses you no longer need.
Quarterly hygiene
- Disable leavers the same day HR confirms departure
- Remove guest users who finished projects
- Reclaim Microsoft 365 licenses from disabled accounts
- Review privileged roles (Global Admin should be rare)
Hybrid tip
If you sync from Active Directory, clean on-prem first or the ghosts come back.
Book a directory hygiene pass with Qutzl.