I am working for a small company who outsource the day-to-day IT helpdesk issues. I do however have access to our Microsoft 365 admin center.
There are a lot of people who are still 'active users', but who are no longer working for the company. In my opinion, these people should be deleted as users, especially since some of them are now working for our competitors and try to log in from time to time.
The IT support company do not agree with me.
The users are unlicensed, and their sign-ins have been blocked.
Their emails have been converted to shared emails in order to retain the content.
According to the IT support company, that is sufficient and there is no security threat.
I would like to have some opinions from the Microsoft Community. Is this the best way to deal with previous employees? Should the email content not rather be moved to another mailbox, and the user completed deleted?
The company files are stored in OneDrive.