Use the following steps to lock someone out of a device.
Head to Devices > Inventory
Click on the three dots next to your employee’s device and Click on View Details
In the Accounts tab, Click the three dots on the account you want to lock
Click the Lock account button in the pop-up to confirm locking the device