Where license waste hides
Most organizations over-provision during hiring waves or project kickoffs and under-deprovision when people leave. Microsoft 365 does not automatically reclaim licenses when accounts are disabled — and disabled accounts often keep their SKUs for months.
Waste also comes from SKU mismatch: premium plans assigned to users who only need email and Teams, or duplicate add-ons stacked on the same account.
Disabled and inactive users
Start with accounts that should not consume a paid seat.
- Disabled users with active license assignments
- Enabled users who have never signed in but hold paid SKUs
- Accounts inactive 90+ days that still carry E3, E5, or Business Premium
- Shared mailboxes incorrectly assigned full user licenses
Oversized and duplicate SKUs
Compare assigned capabilities to actual usage. An E5 license includes advanced security and analytics many roles never touch.
- E5 assigned to users without Defender, Purview, or Power BI need
- Both Business Premium and an standalone Exchange plan on one user
- Trial or add-on licenses that auto-converted to paid without review
- Departmental bundles where a lower tier would cover daily workflows
Estimating reclaimable spend
For each finding, multiply seats by your contracted per-seat rate. Group by SKU so finance can see monthly and annual impact. Even ten reclaimable E3 seats often covers the cost of tooling that finds them automatically.
Document who approved original assignments before bulk removal — some "inactive" accounts are service mailboxes or shared operational identities.
Ongoing cost hygiene
Assign license reviews to offboarding workflows: disable account, remove licenses, then delete after retention. Run a monthly reclaim report and tie it to your procurement calendar so renewals reflect actual need.
Tenant Hawk surfaces unused and misassigned licenses with estimated dollar impact during each scan.