Operations
New hires ready day one, departures closed same hour
Accounts, hardware, access and software prepared before a new employee arrives. Everything revoked and documented the hour someone leaves.
Operations
Access that outlives employment is a common finding
In most environments we inherit, at least one former employee still has something that works.
The first day sets the tone. An employee who spends their first morning waiting for a laptop, then their afternoon waiting for email access, has learned something about how the organization operates before they have done any work. It is a small thing that is noticed disproportionately.
Offboarding matters for a different and more serious reason. Access that persists after departure is one of the most common security gaps we find, and it appears in a surprising number of environments we inherit: former employees with live email accounts, VPN credentials that still authenticate, and shared passwords that were never rotated after someone with knowledge of them left.
Onboarding, done in advance
Given reasonable notice, everything is ready before the person arrives. Machine imaged from your standard build with their software installed. Accounts created with correct group membership and permissions. Email configured, including mobile. Access granted to the file locations, applications and systems appropriate to their role. Multi-factor authentication enrolled. Printers mapped.
We also provide a short written orientation covering how to reach support, how to use the password manager, and what your policies actually require. Ten minutes of clear instruction on day one prevents a surprising amount of subsequent friction.
Role templates
Rather than deciding permissions individually each time, we build templates per role. A new person in accounting receives the accounting access set. Sales receives the sales set. This is faster, and considerably more importantly it is consistent, which means permissions stop drifting into a state nobody can audit.
Offboarding, within the hour
When someone leaves, accounts are disabled rather than deleted, which preserves data while immediately preventing access. Sessions and tokens are revoked, which matters because disabling an account does not always terminate an active session. Mail is forwarded or delegated as the business requires. Company data on personal devices is addressed. Shared credentials the person knew are rotated. The machine is collected, wiped and returned to the pool.
All of it is documented with timestamps. If a question arises later, and occasionally it does, there is a record of exactly what was revoked and when.
Scope
What is included
Everything below is part of the service rather than an upsell discovered later.
Day-one readiness
Machine, accounts, email, access, MFA and printers all prepared before the person arrives rather than during their first morning.
Role-based templates
Permission sets defined per role so access is consistent, fast to apply, and auditable afterward.
Written orientation
A short guide covering support contact, the password manager and your actual policies. Ten minutes that prevents months of friction.
Same-hour access revocation
Accounts disabled, sessions and tokens revoked, shared credentials rotated. Disabling alone does not end an active session.
Data and device handling
Mail forwarded or delegated per your requirements, company data on personal devices addressed, hardware wiped and returned to the pool.
Timestamped documentation
A dated record of exactly what was granted or revoked, which occasionally matters a great deal.
Common questions
How much notice do you need for a new hire?
Three business days is comfortable if hardware is in stock. If a machine needs ordering, ten days. We can move faster in a genuine pinch, and we would rather you tell us late than not at all.
What happens if someone leaves without notice?
Call us immediately, and we revoke access within the hour, usually much sooner. Involuntary departures are exactly the scenario the offboarding process is designed around, which is why it is documented in advance rather than improvised.
Do you handle hardware procurement?
We specify and order on your behalf, and the equipment is purchased in your name so you own it outright. We are not a hardware reseller and we do not mark equipment up.
Related services
Talk to Us
Talk to a technician, not a salesperson
Describe what is happening. We will tell you whether it is a quick fix, a project, or a sign of something larger.
(858) 429-1311Family owned in San Diego, California since 2004 · remote support in all 50 states · US-based technicians · never outsourced