Employee Onboarding IT Checklist: Day One Done Right

Why IT onboarding deserves a checklist

A new employee's first day sets the tone. When their laptop is ready, their email works, and they can get into the tools they need, they feel welcomed and productive. When they spend the morning staring at a password reset screen, you've wasted their time and signaled that things here are a little disorganized.

For a 5–50 person business without dedicated IT staff, onboarding usually falls to an office manager or owner who's already juggling ten other things. A repeatable checklist turns a stressful scramble into a 30-minute routine. It also quietly protects your business: every account you provision deliberately is one you can also de-provision cleanly when someone leaves.

Here's a practical checklist you can copy, adapt, and reuse for every hire.

Before day one: the prep work

The secret to a smooth first day is doing most of the work the week before. Aim to have everything below finished at least a day in advance.

1. Create the core accounts

Start with the accounts everything else depends on:

• Email and identity account. Most small businesses run on Microsoft 365 or Google Workspace. This single account is the person's digital identity — it's what they'll use to log into almost everything else. Create it with a standard naming format (for example, firstname.lastname@yourcompany.com) so your records stay consistent.
• Assign a license. Make sure the account has the right subscription level for the apps they'll actually use (email, Word/Excel or Docs/Sheets, Teams or Meet, cloud storage).
• Turn on multi-factor authentication (MFA). MFA means logging in requires both a password and a second step, like a code from a phone app. This is the single most important security setting you can enable, and many cyber insurance policies now require it. Set it up as part of account creation, not as an afterthought.

2. Plan their access — only what they need

Resist the urge to give every new hire access to everything "just in case." The safer approach is least privilege: give people access to exactly the files, folders, and apps their role requires, and nothing more.

The easiest way to manage this is with groups. Instead of granting access person by person, create role-based groups like "Sales," "Accounting," or "Front Desk," and assign the new hire to the right one. When their access needs change, you adjust the group, not a dozen individual settings.

Make a short list of what the role needs:

• Shared drives or folders (and whether view-only or edit)
• Business apps (CRM, accounting software, scheduling tools, point-of-sale)
• Any industry-specific systems

3. Prepare the device

If you're issuing a laptop or desktop, don't hand over a machine straight out of the box or, worse, a hand-me-down with the last employee's files still on it.

• Wipe and set up fresh. A previous user's device should be fully reset before reassignment.
• Install required software and any browser, printer drivers, and company apps.
• Turn on disk encryption. This scrambles the data on the drive so a lost or stolen laptop doesn't become a data breach. It's built into both Windows (BitLocker) and Mac (FileVault) — it just needs to be switched on.
• Confirm security software is active, including antivirus and automatic updates.
• Enroll the device in management if you use a system that lets you track and remotely wipe company devices. This matters most for mobile and remote workers across the South Shore who aren't sitting in your office every day.

4. Gather hardware and peripherals

Small stuff causes big first-day headaches. Have ready:

• Monitor, keyboard, mouse, dock, and cables
• Headset for calls
• Desk phone or softphone setup, if applicable
• Access badge or door code

Day one: getting them working

5. Hand off credentials securely

Don't email or text a password in plain view. Better options:

• Have the employee set their own password at first login through a secure process.
• Use a password manager — a tool that stores and shares logins safely — if your business uses one. It's also the best way to stop employees from reusing weak passwords or keeping them on sticky notes.

Walk them through the MFA setup on their phone so they're not locked out later.

6. Do a working session, not just a handoff

Sit with the new hire (in person or on a screen share) and confirm the essentials actually work:

• Can they log into email and send a test message?
• Can they open the shared folders they need?
• Can they sign into the main business apps for their role?
• Can they connect to Wi-Fi and print?
• Do calls and video meetings work?

Ten minutes of checking now prevents a week of trickled-in support requests.

7. Cover the basics of staying safe

Your new hire is also your newest security risk until they know the ground rules. Keep it brief and human:

• How to spot phishing emails and who to report them to
• That they should never share passwords or reuse their work password elsewhere
• Which approved tools to use (this helps curb "shadow IT" — unapproved apps employees adopt on their own)
• Who to contact for IT help

The first week: tie up loose ends

• Confirm they're receiving company calendar invites and internal communications.
• Add them to the right distribution lists and shared mailboxes.
• Check that any automatic email signature or display name is correct.
• Schedule a quick check-in at the end of week one to catch anything missed.

Don't forget the exit plan

Good onboarding and clean offboarding are two sides of the same coin. When you set up accounts in an organized, group-based way, shutting them down later is fast and complete. Keep a simple per-employee record of what accounts, devices, and access were granted — so when someone leaves, you can disable their login, recover the laptop, and reclaim licenses the same day. Dormant accounts that never get turned off are a common and avoidable security hole.

A reusable template beats a good memory

The real win here is consistency. Turn the steps above into a one-page checklist, store it where your office manager can find it, and run every hire through the same process. You'll onboard people faster, look more professional, and close security gaps without thinking about it.

This is also exactly the kind of routine a managed IT provider automates behind the scenes — standard account setups, pre-configured devices, and access tied to roles so day one just works.

If onboarding has become a recurring fire drill at your Braintree, Quincy, or South Shore business, we're happy to help you build a process that runs itself. Book a free 20-minute IT Fit Call at https://elecrics.com/book and we'll talk through what a smooth onboarding setup would look like for your team.