Employee Onboarding IT Checklist for Day One Success

Why IT onboarding deserves a checklist

A new hire's first day sets the tone for everything that follows. When their laptop is ready, their email works, and they can log into the tools they need, they feel welcomed and productive. When they spend the morning waiting for a password reset or borrowing a coworker's computer, that first impression takes a hit — and your team loses hours it won't get back.

For businesses in Braintree, Quincy, Weymouth, and across the South Shore that don't have dedicated IT staff, onboarding often happens on the fly. Someone grabs a spare laptop, sets up an email address, and hopes for the best. That approach works until it doesn't — usually when an account gets missed, or worse, when a departing employee still has access months later.

This checklist fixes that. Use it as a repeatable process so every new employee gets the same clean, secure start.

Before day one: the prep work

The best onboarding happens before the employee walks in. Aim to have everything below done at least one business day ahead.

1. Create their core accounts

• Email and identity account. Most small businesses run on Microsoft 365 or Google Workspace — cloud services that bundle email, file storage, and apps. Create the user's account here first, because it becomes their "identity" for logging into almost everything else.
• Use a naming standard. Pick a consistent format like firstname.lastname@yourcompany.com and stick with it. Consistency makes accounts easier to manage and audit later.
• Assign the right license. Make sure the account has the plan that includes the apps they'll actually use (Word, Excel, Teams, etc.). Paying for the wrong tier is a common, quiet money-waster.

2. Set up secure sign-in

• Turn on multi-factor authentication (MFA). MFA means a login requires two things: a password plus a code from a phone app. It's the single most effective step to keep accounts from being hijacked, and many cyber insurance policies now require it.
• Set a strong temporary password the employee changes on first login.

3. Prepare the device

• Assign a computer — ideally company-owned, not a personal one. Personal devices blur the line between work and home data and are hard to secure or reclaim.
• Install updates and confirm the operating system is current.
• Install security software (antivirus/endpoint protection) and confirm it's active.
• Enable disk encryption — BitLocker on Windows or FileVault on Mac. Encryption scrambles the data so a lost or stolen laptop doesn't become a data breach.
• Install the apps they need for their role, not a random assortment.

4. Decide their access — before, not after

This is where most small businesses stumble. Rather than giving broad access "to be safe," grant only what the role requires. This is called least privilege, and it limits the damage if an account is ever compromised.

Make a simple map for each role:

• Which shared folders or drives?
• Which apps and software subscriptions?
• Which customer or financial systems?
• Do they need admin rights on their own machine? (Usually no.)

If you have a managed IT provider, this is exactly the kind of role-based template they help you build once and reuse.

Day one: getting them working

With prep done, the first day should be smooth.

5. Walk through first login

• Have them log into their computer and email account.
• Confirm MFA is set up on their phone.
• Verify they can open the key apps and shared files for their role.

6. Set up communication tools

• Add them to your chat/collaboration platform (Microsoft Teams, Slack, or similar).
• Add them to the right group email addresses or distribution lists (like sales@ or support@).
• Show them how internal calendars and meeting rooms work.

7. Cover phones and printers

• Set up their desk phone or softphone (a phone app on the computer) if you use one.
• Connect them to the office Wi-Fi — ideally a secured staff network, not the guest network.
• Add the office printer so they're not chasing it down later.

8. Deliver a short security orientation

You don't need a formal training program on day one, but a five-minute conversation prevents real problems:

• How to spot phishing emails (fake messages designed to steal passwords).
• Who to contact when something looks wrong.
• The rule that no one should share passwords or reuse work passwords elsewhere.
• How to use the company password manager, if you have one.

The first week: rounding it out

• Confirm files are saving to cloud storage or a backed-up location — not just the desktop, which usually isn't backed up.
• Check that any role-specific software actually works end to end.
• Schedule a quick check-in to catch anything that got missed.

Don't forget the paper trail

Keep a simple record of what each employee received: accounts created, devices assigned, and access granted. A basic spreadsheet is fine. This document is gold when someone leaves, because it becomes your offboarding checklist — every account and device you set up is one you'll need to shut down or collect.

The onboarding checklist at a glance

Before day one

• [ ] Create email/identity account with a naming standard
• [ ] Assign the correct license
• [ ] Turn on MFA
• [ ] Prep and encrypt the device
• [ ] Install security software and role apps
• [ ] Grant least-privilege access per role

Day one

• [ ] First login to computer and email
• [ ] Confirm MFA on their phone
• [ ] Add to chat, calendars, and email groups
• [ ] Set up phone, Wi-Fi, and printer
• [ ] Quick security orientation

First week

• [ ] Verify cloud storage and backups
• [ ] Test role-specific software
• [ ] Check-in and record what was set up

When it's worth handing this off

If you're onboarding a few people a year, this checklist may be all you need. But as you grow — or if you're hiring several people at once — the setup, security steps, and access decisions get harder to do consistently by hand. A managed IT provider can build a standardized onboarding (and offboarding) process so every new hire is ready and secure on day one, without pulling your office manager away from their real job.

If you'd like a second set of eyes on how your business handles onboarding and access, Elecrics offers a free 20-minute IT Fit Call. We serve small and mid-sized businesses across Massachusetts and the South Shore. You can book one at https://elecrics.com/book — no pressure, just a straight conversation about what would actually help.