New Starter IT Setup Checklist
New starter setup should be predictable enough that people get productive quickly without quietly accumulating unnecessary access.
Quick answer
A new starter IT setup checklist should confirm the role, device, accounts, MFA, groups, software, shared resources, manager approvals, first-day support route, and the record of what was issued.
Key takeaways
- Start from the role and manager approval, not from copied access.
- Record the device, accounts, groups, and software issued.
- Use the first week to check access is sufficient but not excessive.
Before day one
- Confirm legal name, preferred name, job title, manager, location, start date, and employment type.
- Confirm whether the starter needs Microsoft 365, Google Workspace, or both.
- Choose the role template or list the systems the manager has approved.
- Prepare the device, asset record, charger, dock, headset, security key, or other accessories.
- Create the account and apply the correct licence or workspace access.
- Prepare MFA or 2-step verification instructions.
- Schedule any first-day setup support.
Device setup
- Record serial number, assigned user, warranty or purchase notes, and device name.
- Apply baseline settings used by the business.
- Confirm encryption and screen lock settings where applicable.
- Install required applications.
- Confirm update status before handover.
- Install management or endpoint tooling only where it is part of the agreed service.
- Add the device to the inventory before issuing it.
Account and access setup
Use named accounts
Avoid shared user accounts. Named accounts make access review, offboarding, and audit trails much easier.
Assign groups carefully
Use role-based groups where possible and avoid copying another employee's access without review.
Protect key accounts
Microsoft and Google both recommend stronger sign-in protection such as MFA or 2-step verification for users, especially admins and sensitive roles.
First-week review
- Ask the manager to confirm access is correct.
- Remove any temporary access used during setup.
- Check the starter knows how to request support.
- Confirm the device record and issued-access record are complete.
- Note any access that should become part of the role template for next time.
Sources and further reading
Related resources
Checklist
Employee Offboarding Checklist
A calm checklist for removing access, recovering devices, transferring ownership, and keeping a completion record when someone leaves.
Checklist
The SME IT Operations Checklist
A practical monthly checklist for keeping devices, access, updates, support, reporting, and supplier ownership visible in a growing SME.
Guide
Microsoft 365 Security Basics For Small Businesses
A practical guide to Microsoft 365 security basics for SMEs, including MFA, admin access, email protection, sharing, devices, and access review.