How to handle a disgruntled employee

A disgruntled employee is one whose dissatisfaction has turned into visible resentment that affects their work or their team. Handling it well means addressing it early, documenting accurately, and knowing which complaints are legally protected.

Managers usually recognize the problem late, after the behavior has already affected a team. This guide covers the warning signs, how to run the conversation, the legal and security risks that make mishandling expensive, and what to do when the situation ends in termination.

A disgruntled employee is an employee whose dissatisfaction has hardened into resentment they express through behavior: withdrawal, open criticism, resistance to direction, or disengagement from the team. The defining feature is not that they are unhappy. It is that the unhappiness has started to shape how they work and how others around them work.

The distinction matters operationally. Dissatisfaction is common and often productive, because it surfaces real problems. Disgruntlement is dissatisfaction that has stopped looking for a resolution, and it rarely improves without intervention.

A dissatisfied employee still believes the problem can be fixed and raises it through normal channels. A disgruntled employee has stopped believing that and expresses the grievance through behavior instead. A hostile employee has moved to conduct that threatens colleagues or the organization. Each stage calls for a different response.

Stage	What it looks like	What HR should do	Risk if ignored
Dissatisfied	Raises concerns openly, still engaged, wants a fix	Listen and resolve through normal management	Escalates to disgruntlement
Disgruntled	Withdrawn or openly critical, performance slipping, affecting others	Structured conversation, documented plan, defined review date	Team contagion, attrition, exit on bad terms
Hostile	Threats, harassment, sabotage, refusal to follow direction	Formal process with legal and security involved	Legal liability, safety and data exposure

The reliable signal is change rather than any single behavior. A consistently blunt employee being blunt is not a warning sign. A previously engaged employee going quiet is. Watch for shifts that persist beyond two or three weeks and appear across more than one category below.

• Performance decline in someone whose work was previously steady.
• Increased absence, late starts, or sudden reluctance to take on visible work.
• Withdrawal from meetings, or contributing only when asked directly.
• Open criticism of decisions in group settings, particularly to more junior colleagues.
• Resistance to direction, including slow compliance rather than refusal.
• Team friction, where colleagues start routing around the person.
• Disengagement from anything discretionary, such as mentoring or improvement work.

Quiet job searching often runs alongside these. Careerminds research found 46.5% of workers have looked for another job just in case, and 33.5% avoided taking PTO or sick days because of job security concerns, so presenteeism can indicate disengagement rather than commitment.

Most disgruntlement traces to a perceived unfairness rather than a workload problem. The common triggers are a decision the employee experienced as unjust, a promise they believe was broken, or a pattern of not being heard. Identifying which one applies determines whether the situation is fixable.

• A promotion or pay decision perceived as unfair or unexplained.
• Recognition going to someone else for their work.
• A performance review they consider inaccurate.
• Favoritism, real or perceived, in how opportunities are allocated.
• No visible path forward. Nearly three-quarters of workers say they would be far more likely to stay if a clear career framework were in place.
• Bullying, harassment, or disrespectful treatment, which is a legal matter rather than a management one.
• Organizational change handled badly, particularly restructuring or layoffs affecting colleagues.
• Circumstances outside work, including health, bereavement, or financial pressure.

The last category needs care, because the response is support rather than performance management. Where the cause is structural, addressing it through employee engagement and career development work resolves more cases than individual intervention does.

Run it as a private, prepared conversation focused on observable behavior and its effect, not on attitude. Ask what has changed before you explain what needs to change. The goal of the first conversation is to understand the grievance accurately, because acting on a misdiagnosed cause makes the situation worse.

1. Prepare specifics. Two or three documented examples of behavior and its effect, with dates. Not adjectives.
2. Meet privately and allow enough time. A rushed conversation reads as dismissal.
3. Open with the change you have observed, then stop talking and let them respond.
4. Listen for the underlying grievance. It is often different from the presenting complaint.
5. Separate what is fixable from what is not, and say plainly which is which.
6. Agree specific actions on both sides, with a named review date.
7. Document the conversation the same day, factually, including what you committed to.
8. Follow up on the review date whether or not things improved. Skipping it confirms the original grievance.

Two things to avoid. Do not tell someone their attitude is a problem, because it is unmeasurable and invites a dispute about interpretation rather than facts. Do not promise an outcome you cannot deliver, since a second broken promise removes any remaining trust.

If the behavior continues after a documented conversation, the next step is a formal employee warning notice. Where the conduct involves refusal to follow reasonable direction, see insubordination.

The main risk is disciplining an employee for conduct that is legally protected. Complaints about discrimination, harassment, or safety are protected activity, and so are group discussions about pay and working conditions. Acting against someone shortly after such a complaint creates a retaliation claim regardless of the actual motive.

This is general information rather than legal advice, so confirm your position with counsel. Three areas cause most problems:

• Protected concerted activity. Section 7 of the National Labor Relations Act protects employees acting together over pay and working conditions. It applies to most private employers whether or not the workplace is unionized, so an employee organizing colleagues over scheduling or pay may be protected even when the tone is hostile. Supervisors and independent contractors are excluded, which matters when the disgruntled person manages others.
• Retaliation. Where the grievance is a complaint about discrimination, harassment, or an unsafe practice, discipline that follows closely in time invites a claim under Title VII, the ADA, the ADEA, or OSHA protections. Timing is the evidence a claimant relies on most.
• Inconsistent treatment. Applying a standard to this employee that has not been applied to others is the single most common evidentiary problem, and it is usually discovered only after a claim is filed.

The practical protection is documentation created contemporaneously, recording behavior and business impact rather than characterizations of personality, and a check that the same standard has been applied to comparable cases.

Disgruntlement is a recognized insider risk factor. The Cybersecurity and Infrastructure Security Agency defines an insider threat as an insider using authorized access, intentionally or unintentionally, to harm an organization, and its Insider Threat Mitigation Guide identifies disgruntlement over a perceived grievance as a common motivator alongside unmet expectations and termination.

The proportionate response is access hygiene applied consistently, not surveillance of an individual. Monitoring one employee because a manager finds them difficult creates legal exposure and confirms the grievance if discovered.

• Apply least privilege as standing practice, so access matches the role rather than accumulating over time.
• Run periodic access reviews to catch permission drift, particularly after role changes.
• Coordinate HR, IT, and legal before any termination, so access revocation is timed to the notification.
• Revoke access at the point of exit, covering systems, physical access, shared credentials, and third-party tools.
• Protect against sole custody of critical systems or data, which is a continuity risk independent of anyone’s mood.

These controls belong in standard offboarding best practices rather than being improvised for one person. Applied to everyone, they are unremarkable. Applied to one employee, they signal distrust and can become evidence.

Termination becomes appropriate when documented conversations have not changed the behavior, the effect on the team or the work continues, and the conduct is not protected activity. Disgruntlement alone is not grounds. The documented performance or conduct problem is what supports the decision.

Before proceeding, confirm four things: the behavior was raised clearly and the employee had a genuine chance to change it; the record documents conduct and impact rather than attitude; the standard applied matches comparable cases; and no recent protected complaint sits close enough in time to raise a retaliation question. Where any of these is unclear, resolve it before the meeting rather than after.

Handle the exit itself with the same care as any other. Our guides to how to fire someone and termination policy cover the process. If the employee stops attending instead of resigning, see job abandonment.

Prevention is mostly about explaining decisions and providing a visible path forward. Most disgruntlement begins with a decision the employee did not understand and could not question, so the practical controls are explanation, a route for raising concerns, and manager capability.

• Explain decisions that affect people, particularly promotion, pay, and restructuring outcomes.
• Give people a route to raise concerns that does not depend on their own manager.
• Act on what surfaces, or explain why not. Collecting feedback and doing nothing is worse than not asking.
• Make progression visible, since absence of a path is a common cause of quiet disengagement.
• Equip managers to hold difficult conversations early, when they are still small.

Exit data is the cheapest source of insight here, because departing employees say things current ones will not. See how exit interviews save billions.

An employee whose dissatisfaction has become resentment expressed through behavior, such as withdrawal, open criticism, resistance to direction, or declining performance. The distinguishing feature is that it affects their work or the team, rather than simply being unhappy.

Not for the sentiment itself. Termination needs a documented performance or conduct problem, a genuine opportunity to change, and consistent treatment against comparable cases. If the grievance involves a protected complaint about discrimination, harassment, or safety, discipline can create a retaliation claim.

Treat it as a formal matter from the outset rather than a management conversation. Involve HR and legal, document specific incidents with dates and witnesses, address any immediate safety concern, and follow your written disciplinary process rather than improvising.

Sustained change from a person’s established pattern: declining performance, increased absence, withdrawal from meetings, open criticism in group settings, resistance to direction, and colleagues beginning to route around them.

They can be. CISA identifies disgruntlement over a perceived grievance as a common insider threat motivator. The appropriate response is consistent access controls and least privilege applied across the organization, not monitoring of an individual, which carries its own legal risk.

Yes, on the same day, recording observable behavior, business impact, what was agreed, and the review date. Record facts rather than characterizations of personality, since contemporaneous factual records are what support a decision if it is later challenged.

• Disgruntlement is dissatisfaction that has stopped seeking resolution and started showing up in behavior. It rarely improves without intervention.
• The reliable warning sign is sustained change from a person’s own baseline, not any single behavior.
• Address observable behavior and its impact. Attitude is unmeasurable and turns the conversation into a dispute about interpretation.
• Check whether the grievance is protected before acting. Complaints about discrimination, harassment, or safety, and group discussions about pay, carry legal protection.
• Apply security controls organization-wide rather than to one individual, since targeted monitoring creates legal exposure and confirms the grievance.

Most disgruntlement escalates because the first conversation happened too late or went badly, and most managers have had no training in holding it. Organizations typically address this by building manager capability alongside clear career frameworks, so concerns surface early and progression is visible. Careerminds combines coaching, skill development, and workforce analytics to support that work. To discuss it for your organization, contact our team.