Direct answer
Confirm the outgoing user's data and access requirements, perform the approved reset or sanitization for the transfer, then enroll and verify the device for its new owner.
Prepare the handoff
Match the physical asset and current owner to management records. Arrange authorized backup, retention and transfer of business data; confirm personal data and legal holds with the appropriate owner. Record attached storage and peripherals before changing the device.
Remove prior access
Use the organization's approved reset, retirement or sanitization procedure for the destination and data sensitivity. Review prior profiles, credentials, recovery information and ownership in management systems. NIST media sanitization guidance distinguishes the goal of rendering data access infeasible from merely removing a user profile.
Reference: NIST: Media sanitization.
Provision and test
Assign the new owner and management groups, apply current updates and baseline, and verify encryption, endpoint protection and required applications. Test new-user access and ensure the previous user's sessions and data are not available through the new handoff. Track any offline or pending configuration.
Verify a department transfer
Before moving a laptop from finance to another department, confirm the finance owner's retained data, attached storage and account sessions. After approved preparation, test the new user's sign-in and check that the prior profile and business data are not available. Record the result without opening personal files that are outside the assessment scope.
Assessment limits
A management reset does not necessarily sanitize every attached drive or revoke every cloud session. Required treatment depends on ownership, retention and the destination.
Frequently asked questions
Does changing the Windows username remove old data?
No. Follow the approved data handling and device preparation process.
Does a reset revoke cloud sessions?
Not necessarily. Review identity-provider and application sessions separately.
Why check attached media?
A reset of the operating system may not address secondary or removable storage.
Primary sources and further reading
These guides combine published security guidance with practical assessment planning. Adapt checks to the owner's policy, environment, and authorized scope.
This guide was prepared with AI assistance using the linked sources and illustrative examples. Check current vendor guidance and your environment before making changes.