Why is ending sessions listed separately from blocking the account?
Because they are different actions and almost everybody does only the first. Blocking sign-in prevents the next login. A device that is already signed in holds a valid session and keeps working, sometimes for days, so a leaver can carry on reading mail from a personal phone after their access is officially gone. In Microsoft 365 it is one extra click once you know to look for it.
Why does it ask whether the departure is a resignation?
Because it changes the order, not the contents. When somebody is leaving on their own terms, closing access after the conversation is fine and closing it before would be insulting. When they are not, access should be closed while the conversation is happening, and somebody needs to have been asked to do that in advance. That is a planning decision, not a technical one.
Do I have to enter the person’s name?
No, and there is nowhere to. The checklist does not need it, and asking would mean collecting personal details about somebody who never visited this site and did not agree to anything. Print it and write the name on at the top if that helps you.
Is this free, and do I have to give you my email?
Free, and the checklist is there before you tick anything. Email is only if you want it sent to you as a document to reuse. Nothing you select leaves your browser.
What gets forgotten most often?
In order: ending live sessions, industry software logins that are not linked to the main account, shared passwords the person knew, online services registered to their email address, and scheduled jobs running under their login. Email is almost never the one that is missed.
How long should we keep the mailbox?
Long enough that genuine mail is not lost, short enough that it is not an open account nobody watches. Most small businesses land somewhere between one and three months with an auto-reply pointing elsewhere, then convert it to a shared mailbox. The important part is putting a date on it, because without one it stays live indefinitely.
Should we delete their account or keep it?
Block it rather than delete it, at least at first. Deletion can take the mailbox and any files they owned with it, and in most platforms it starts a retention clock you cannot pause. Block, hand over, then decide about deletion once you are sure nothing is still needed.
Can you just handle this for us?
Yes, and it is part of a managed plan rather than an extra. Joiners and leavers are the single most commonly skipped task in a business without dedicated IT, precisely because they land on whoever is busiest that week.