client/cascades: britney.thompson M365 offboarding complete — sign-in blocked, license removed, litigation hold

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
This commit is contained in:
2026-05-20 14:41:54 -07:00
parent 517278f66f
commit 35d3a39242
2 changed files with 3 additions and 3 deletions

View File

@@ -364,13 +364,13 @@ GPOs exist but effectiveness is limited since most PCs are not domain-joined. Al
| Issue | Account | Action Needed |
|-------|---------|---------------|
| ~~Still enabled — departed~~ | ~~britney.thompson~~ | **DONE 2026-05-20** — disabled. M365 license still to harvest. |
| ~~Still enabled — departed~~ | ~~britney.thompson~~ | **DONE 2026-05-20** AD disabled. M365: sign-in blocked, license removed, litigation hold applied. |
| ~~Still enabled — flagged for disable~~ | ~~Richard.Adams, Julian.Crim, Christopher.Holick~~ | **DONE 2026-05-20** — all disabled. |
| ~~Old-format account — superseded~~ | ~~Shontiel.Nunn~~ | **DONE 2026-05-20** — disabled. s.nunn (Caregivers) is the active account. |
| Cloud-only M365 account — RESOLVED | Alma.Montt | Intentional and correct — no AD sync conflict. |
| krbtgt password age | krbtgt | 569+ days old as of 2026-03-20. Needs rotation. Deferred. |
| Meredith.Kuhn + John.Trozzi in Domain Admins | Both | Non-IT staff — remove from Domain Admins. Deferred. |
| britney.thompson M365 license | britney.thompson | Account disabled. License not yet harvested — do before next billing cycle. |
| ~~britney.thompson M365 offboarding~~ | ~~britney.thompson~~ | **DONE 2026-05-20** — sign-in blocked, license removed, litigation hold applied via sysadmin@. |
## Login Activity (audit 2026-03-20 — historical/stale)

View File

@@ -186,7 +186,7 @@ After first successful join — link GPOs per phase3-domain-join.md step 5c.
| Item | Priority | Notes |
|------|----------|-------|
| britney.thompson M365 license harvest | Medium | Account disabled; license still active |
| ~~britney.thompson M365 offboarding~~ | ~~Done~~ | Sign-in blocked, license removed, litigation hold applied (sysadmin@ via admin center 2026-05-20) |
| Phase 3 domain joins | High | Block on MDIRECTOR-PC needing Win10 Pro upgrade |
| krbtgt password rotation | Medium | 569+ days old — deferred |
| Remove Meredith.Kuhn + John.Trozzi from Domain Admins | Low | Deferred |