Email User Management
Standard operating procedure for managing existing Microsoft 365 email accounts.
Overview
This SOP covers common administrative tasks for managing employee email accounts, including password resets, license management, account modifications, and offboarding.
Accessing User Management
- Go to Active Users in Microsoft 365 Admin Center
- Sign in with
adminbee@beehaveserviceteam.com
Direct Links to Common Pages
| Page | URL |
|---|---|
| Active Users | https://admin.microsoft.com/#/users |
| Add New User | https://admin.microsoft.com/#/users/adduser |
| Deleted Users | https://admin.microsoft.com/#/deletedusers |
| Shared Mailboxes | https://admin.microsoft.com/#/sharedmailboxes |
| Teams & Groups | https://admin.microsoft.com/#/groups |
| Licenses | https://admin.microsoft.com/#/licenses |
| Billing | https://admin.microsoft.com/#/billoverview |
Common Tasks
Reset a User’s Password
- Go to Users > Active users
- Select the user’s name
- Click Reset password
- Choose:
- Auto-generate password (recommended)
- Or create a custom password
- Check Require this user to change their password when they first sign in
- Click Reset password
- Send the temporary password to the user securely
Edit User Information
- Go to Users > Active users
- Select the user’s name
- Click the appropriate tab:
- Account: Edit name, username, contact info
- Licenses and apps: Modify assigned licenses
- Mail: Configure email settings, aliases, forwarding
- OneDrive: Manage storage settings
Change Display Name or Job Title
- Select the user from Active users
- Click the Account tab
- Click Manage contact information
- Update fields as needed:
- Display name
- Job title
- Department
- Phone numbers
- Click Save changes
Add an Email Alias
Use aliases when staff need to receive email at multiple addresses.
- Select the user from Active users
- Click the Mail tab
- Under Email addresses, click Manage email types
- Click Add email type
- Enter the alias (e.g.,
support@beehaveserviceteam.com) - Click Save changes
Set Up Email Forwarding
- Select the user from Active users
- Click the Mail tab
- Click Manage email forwarding
- Check Forward all email sent to this mailbox
- Enter the forwarding address
- Optional: Check Keep a copy of forwarded email in this mailbox
- Click Save changes
Configure Out of Office Reply
Users can set this themselves, but admins can also configure:
- Select the user from Active users
- Click the Mail tab
- Click Manage automatic replies
- Configure the auto-reply message and schedule
- Click Save changes
Managing Groups and Distribution Lists
View Existing Groups
- Go to Teams & groups > Active teams & groups
- Review existing groups and membership
Add User to a Distribution Group
- Go to Teams & groups > Active teams & groups
- Select the Distribution list tab
- Select the group
- Click Members tab
- Click View and manage members
- Click Add members
- Search for and select the user
- Click Add
Create a New Distribution Group
- Go to Teams & groups > Active teams & groups
- Click Add a group
- Select Distribution
- Complete the setup:
- Group name
- Group email address
- Description
- Owners
- Members
- Click Create group
Shared Mailboxes
Create a Shared Mailbox
Use for departmental emails (e.g., billing@beehaveserviceteam.com).
- Go to Teams & groups > Shared mailboxes
- Click Add a shared mailbox
- Enter:
- Name (e.g., “Billing”)
- Email address
- Click Save changes
- Add members who need access
Add Members to a Shared Mailbox
- Go to Teams & groups > Shared mailboxes
- Select the mailbox
- Click Members > Edit
- Click Add members
- Select users and click Add
License Management
View Current Licenses
- Go to Billing > Licenses
- Review available and assigned licenses
Remove a License from a User
- Select the user from Active users
- Click Licenses and apps tab
- Uncheck the license to remove
- Click Save changes
Reassign a License
When an employee leaves and a new one starts:
- Remove license from departing employee (see Offboarding below)
- Assign license to new employee (see Email Setup)
Offboarding: Removing a User
When an employee leaves the company:
1. Block Sign-In (Immediate)
- Go to Users > Active users
- Select the departing user
- Click Block sign-in
- Check Block this user from signing in
- Click Save changes
2. Reset Password
- Reset the password to prevent any cached access
- Use a random, auto-generated password
3. Set Up Email Forwarding (Optional)
If emails need to go to a manager or replacement:
- Configure email forwarding (see above)
- Set a reminder to disable after 30-90 days
4. Convert to Shared Mailbox (Optional)
To retain access to emails without using a license:
- Go to Users > Active users
- Select the user
- Click the Mail tab
- Click Convert to shared mailbox
- Click Convert
- After conversion, remove the license
5. Delete the User (After Retention Period)
- Go to Users > Active users
- Select the user
- Click Delete user
- Choose what to do with their data:
- Give another user access to OneDrive files
- Forward email for a period
- Click Delete user
6. Post-Offboarding Checklist
- Sign-in blocked
- Password reset
- Email forwarding configured (if needed)
- OneDrive files transferred or backed up
- Removed from Teams and SharePoint groups
- Removed from distribution lists
- License reassigned or available for new hire
- User deleted after retention period (typically 30 days)
Security Best Practices
Multi-Factor Authentication (MFA)
Ensure all users have MFA enabled:
- Go to Users > Active users
- Click Multi-factor authentication
- Select users without MFA enabled
- Click Enable
Review Sign-In Activity
To check for suspicious activity:
- Select the user from Active users
- Click the Account tab
- Click Sign-in activity
- Review recent sign-ins for unusual locations or times
Audit Log
To review admin actions:
- Go to Compliance > Audit
- Search for specific activities or users
- Export logs as needed for compliance
Troubleshooting
User Not Receiving Emails
- Check spam/junk folder
- Verify no mail flow rules are blocking
- Check if mailbox is full (50 GB limit for Business Standard)
- Review email forwarding settings
User Can’t Access Shared Mailbox
- Verify user is added as a member
- May take up to 1 hour for permissions to propagate
- User may need to add mailbox manually in Outlook
Sync Issues with Outlook
- Have user restart Outlook
- Clear Outlook cache
- Remove and re-add account if needed
Related SOPs
- Email Setup - Creating new user accounts
- HIPAA - Email security and PHI protection
- Code of Conduct - Professional email usage