IT Onboarding Checklist: What to Set Up Before Day One

The new hire walks in at 8:55. By 9:15 they have a laptop that works, a login that works, and a phone extension with their name on it. Nobody has to call anyone. Nothing about that morning feels remarkable.

That is the goal. A good first morning is boring.

Most small businesses do not have an onboarding process. They have a person who remembers things. That works until the person is on vacation, or two hires start in the same week, or the new employee needs access to a system nobody remembered to mention.

Here is the checklist we run, in the order it has to happen.

The Week Before

Get the access list from the manager, in writing

Do not guess what the new person needs. Ask the hiring manager for the list: email, shared drives, the scheduling system, the client database, the industry tool. Guessing leads to either too much access or three days of "I can't open this."

Create the account, not the shared one

Every person gets their own login. A shared "front desk" account followed by a shared "office" account is how a business ends up unable to tell who did what. Individual accounts are also what makes offboarding one click instead of an investigation.

Check the license count

Microsoft 365, the accounting software, whatever charges per seat. Adding a person without adding a seat works right up until an audit or a renewal surprise. Count first, then invite.

Prepare and test the hardware

Image the laptop, apply updates, install the standard software, and test the login on the actual machine before it goes on the desk. A laptop that was tested two weeks ago is not the same as a laptop that will sign in on Monday.

Set up the phone

Extension, voicemail, and the name that shows on caller ID. On a hosted business phone system in Central PA, that takes minutes when it is done in advance and most of a morning when it is not.

The Day Before

Deliver credentials safely

Send the temporary password through a different channel than the one it unlocks, or better, have the person set it on a device you hand them. Never in a text message to their personal phone along with a screenshot of their email.

Enroll multi-factor authentication

Do it with the person, on the first day, before they have a reason to be annoyed by it. A new employee has no bad habits to unlearn. This is the cheapest security win you will get all year.

Stage the desk

Monitor, dock, keyboard, headset, chair height. Print the Wi-Fi instructions if the guest network is how they will get online before their account is active. Small things, but they are the difference between working and waiting.

Add them to the right groups

Distribution lists, team chats, shared calendars, the drive folder for their department. If the company has a weekly meeting, put it on their calendar before they arrive.

Day One

Fifteen minutes with IT

How to get help, where to submit a ticket, what to do if something looks wrong. Fifteen minutes on the first morning saves hours of confusion later, and it gives the new person a face to call when something breaks.

Password manager and security basics

Set up the password manager on day one, not week three. Go over phishing, the approved way to share files, and what not to plug into a work computer. Keep it short. Nobody absorbs a two-hour security lecture on their first morning.

Confirm they can do their job

Have them open the three systems they will use most. Watch, or ask. Access that exists on paper and access that works are different things, and day one is when you want to find that out.

The First Month

Review access at 30 days

Compare what the manager asked for with what the person actually uses. Remove the rest. Over-provisioning is the quiet way small businesses end up with a dozen people holding the keys to the client database.

Close the loop with offboarding

Onboarding and offboarding are the same list read backward. If you do not have the offboarding side written down, ask for it now, before someone leaves on short notice. A departing employee with an active account is a real risk, and the fix takes ten minutes when you have the checklist.

Why This Is Worth the Bother

Three reasons. The new person feels expected instead of tolerated, which matters more than most owners think. Your access list stays honest. And nobody spends the first week calling the office because their email will not load.

It also protects the business. Most security incidents at small companies involve an account that should have been closed or a permission that should not have been granted. Both come from onboarding and offboarding being informal.

A provider of managed IT services in Central PA usually runs this list as a standard process, which means the hiring manager fills in a form and the rest happens. If you are doing it yourself, a provider of cybersecurity services in Central PA can still check the access review and the account cleanup, since that is where the risk lives.

Make It a Template

Write the checklist down once and reuse it. Keep it in the same place as the job description and the offer letter. When the next hire is approved, the list is already there, and the only decision left is who does which line.

If you would like us to run it for you, call BlackCSI at (717) 620-3042 or get in touch. We can set up the template and have the next new hire ready before they walk in.