User works in the office for a few weeks, then leaves.
Same user returns a year later.
The user account was never removed from SharePoint, but the user was unable to access sites, where permissions were directly granted. Sites were Domain Users was implemented, the user could access sites.
On sites where the user was granted direct permissions, they would get the Error: Access Denied message box.
Remove the user account and re-add it.