When a new person starts, the instinct is to set everything up on their first morning. Don't — at least not then. That's how a new hire spends day one watching someone reset passwords and wait for downloads, instead of meeting the team and getting started. Onboarding is really a short checklist, and almost all of its value is in doing the steps in the right order and a little early. Here's the order we use.
1. Create and license the account early — not on the morning
A Microsoft 365 account often needs a little time to fully activate, and the license has to apply before email and the Office apps actually work. Create the account a few days ahead, assign the license, and sign in once yourself to confirm it's live. That's the step that prevents the classic first-day snag — a new hire staring at an 'account not activated' message while everyone waits.
2. Prep the device — clean profile, standard apps, updates
If it's a new machine, install your standard software and run all the updates before it's handed over, so the new hire isn't sitting through downloads on day one. If you're reusing a laptop from someone who left, remove the old user profiles and files first — the new person should get a genuinely clean device, and the previous person's data shouldn't be sitting on it.
3. Turn on multi-factor authentication from the very start
Set up multi-factor authentication — the phone app that approves logins — during setup, not 'later.' Later has a way of never arriving, and MFA is the single most effective protection against someone breaking into an account. Have the new hire install Microsoft Authenticator and scan the code on their first sign-in, and it's done for good.
4. Sign in and confirm email and files actually work
Before you hand the device over, sign in on it and check the basics really work: email sends and receives, and OneDrive syncs. Watch for an 'unlicensed' warning on OneDrive — that means the license didn't apply yet, and it's much better to catch it now than to have the new hire discover it mid-morning. Two minutes of testing saves a frustrating first day.
5. Grant the right access — and verify each one
Add the new hire to the shared mailboxes, SharePoint sites or Teams, and shared folders their role needs — then actually open each one to confirm they can get in. 'Added to the group' isn't the same as 'can access it': permissions can take a few minutes to apply, or need the app restarted before they show up. Checking each one now is the difference between a smooth start and a trickle of 'I can't find the X drive' messages in week one.
6. Hand over a simple 'you're all set' guide
Finish with a short note for the new hire: how to log in, where the shared files live, and how to reach IT if something's off. It costs you five minutes and turns a good setup into a genuinely great first day — the kind people remember.
