If you can use Workflow, look at Workflow to remove ALL leavers' standing access which fulfil your requirement.