Educause Security Discussion mailing list archives
Re: do your former employees get to keep their email address?
From: Tim Doty <tdoty () MST EDU>
Date: Wed, 21 Aug 2013 10:22:12 -0500
We have a different situation so a different solution applies. Specifically, our HR requires the employee retain the account for the ability to login post employment -- for example, to access historic W2s.
In our case the ex-employee does not retain the email account (excepting retirees), but then again the department doesn't get it either -- the mailbox is removed after a period of time.
What we encourage is:- a smooth transition. Try to hand off contacts to a replacement, etc. Obviously this doesn't often work well with unfriendly terminations.
- avoid using employee's assigned email alias for business. This is especially true for employees with broad professional contacts, such as recruitment or soliciting donations. It is trivial to create and reassign email aliases which goes a long way toward resolving those issues.
Both of these require effort before termination occurs and of course we are not completely successful in encouraging following these principles, but it helps.
Tim Doty On 08/21/2013 09:35 AM, Bob Bayn wrote:
This is only somewhat security related. USU has just decided, by policy, to terminate an employee's email account and their email address at the end of employment. There are two motivations for this new policy: 1) University email address is being used as the access token for personal use of software that has been licensed by USU to include that use. We cannot extend that access to former employees under terms of the licensing agreement. 2) HR wants to be able to access and retain the business related communications that are directed to a former employee's address. One category of protest to this decision is from people who want to maintain the professional connections they have made using their USU address. That can't always be accomplished by sending out a change-of-address message to everyone in your addressbook. Up to this point we HAVE been maintaining forwards from a former employee's old USU address to their current address elsewhere. Has anyone else dealt with this transition in the extent of your email service? Bob Bayn SER 301 (435)797-2396 IT Security Team Office of Information Technology, Utah State University three common hazardous email scams to watch out for: 1) unfamiliar transaction report from familiar business 2) attachment with no explanation in message body 3) "phishing" for your email password
Attachment:
smime.p7s
Description: S/MIME Cryptographic Signature
Current thread:
- do your former employees get to keep their email address? Bob Bayn (Aug 21)
- Re: do your former employees get to keep their email address? Sherry Callahan (Aug 21)
- Re: do your former employees get to keep their email address? John K Lerchey (Aug 21)
- Re: do your former employees get to keep their email address? Pete Hickey (Aug 21)
- Re: do your former employees get to keep their email address? Walter Moore (Aug 21)
- Re: do your former employees get to keep their email address? Shalla, Kevin (Aug 21)
- Re: do your former employees get to keep their email address? Roger A Safian (Aug 21)
- Re: do your former employees get to keep their email address? W. Greg Price, Sr. (Aug 21)
- Re: do your former employees get to keep their email address? Tim Doty (Aug 21)
- Re: do your former employees get to keep their email address? Shamblin, Quinn (Aug 21)
- Re: do your former employees get to keep their email address? Tim Faircloth (Aug 21)
- Re: do your former employees get to keep their email address? John C. Roberts (Aug 21)
- Re: do your former employees get to keep their email address? John C. Roberts (Aug 21)
- Re: do your former employees get to keep their email address? Sherry Callahan (Aug 21)