Microsoft 365 Setup Checklist for a Growing Business

Design identity before creating accounts

Decide naming conventions, administrator ownership, licence needs and joiner-mover-leaver responsibilities first. Avoid sharing named accounts or relying on one person's private email address for recovery.

Minimum setup

• Verify the business domain and configure email records correctly
• Create separate day-to-day and administrative accounts
• Enable multifactor authentication
• Use groups and shared mailboxes instead of shared passwords
• Define access for staff, contractors and external partners
• Configure device updates, encryption and screen locking
• Record recovery methods and administrator contacts

Make onboarding repeatable

Use a written checklist for account creation, licence assignment, device preparation, access testing and staff orientation. The same record should support offboarding so access can be removed promptly when someone leaves.