A new staff member who can't access their email on day one, shares a login with a colleague, or gets given more system access than their role requires - these are all IT onboarding failures. They cost productivity and create security gaps. Here's a complete checklist to get it right every time.
Know someone who needs this checklist?
Forward it to whoever handles IT, admin, or operations on your team.
Why IT Onboarding Matters Beyond Just “Setting Up a Computer”
Poor IT onboarding has two consequences Perth businesses often underestimate. First, it costs productivity - a staff member fumbling with access issues in their first week is a poor first impression and a real cost. Second, it creates security risk. Giving new staff admin rights they don't need, skipping MFA setup, or failing to create individual accounts (so they share someone else's login) are all common mistakes that become vulnerabilities.
Before Day One - Prepare in Advance
IT onboarding should start before the employee walks in the door, not when they arrive:
- Create their Microsoft 365 or Google Workspace account - including email address, display name, and licence assignment
- Add them to the right groups and distribution lists - so they receive relevant emails from day one
- Prepare their device - if it's a company device, enrol it in MDM, install required software, and configure it to company standards before they arrive
- Set up their accounts in business systems - accounting software, CRM, project management tools, industry-specific platforms
- Assign appropriate access levels - based on their role, not a copy of whoever's account is easiest to clone
Day One IT Checklist
- Email account working and accessible
- MFA enrolled on their phone for Microsoft 365 or Google Workspace - this should happen before they do anything else
- Password manager account created and set up
- Device configured with screen lock and encryption enabled
- Access to shared drives and folders confirmed - only what they need for their role
- Printer and peripheral setup completed
- VPN or remote access configured if they'll work from home
- IT contact details provided - who to call when something doesn't work
The Principle of Least Privilege
New staff should receive the minimum access required to do their job - nothing more. A receptionist does not need access to financial records. A junior designer does not need admin rights on their computer. Over-provisioned access is one of the most common ways a breach spreads beyond its initial entry point.
This is harder to implement reactively than proactively. Define access levels for each role in your business before you need to onboard someone, so the process is consistent rather than ad hoc.
Security Briefing - Often Skipped, Always Important
Every new staff member should receive a basic security briefing as part of onboarding:
- How to recognise a phishing email and what to do if they receive one
- The company password policy - unique passwords, password manager required
- What data can and cannot be stored on personal devices or personal cloud accounts
- Who to contact immediately if they suspect a security incident
- The consequences of a data breach - both for the business and for them personally
This doesn't need to be a long session. A 15-minute conversation with clear documentation covers most of what matters.
The IT Offboarding Mirror
Every onboarding step should have a corresponding offboarding step. When you create an account, document it. When you grant access to a system, record it. A proper onboarding process makes offboarding systematic - so when a staff member leaves, nothing gets missed and no access lingers.
Maintain a simple IT access register for each employee: what accounts they have, what systems they can access, what devices are assigned to them. Update it when their role changes, not just when they join or leave.
Using MDM to Standardise Onboarding
For Perth businesses with more than five staff, Mobile Device Management (Microsoft Intune or similar) transforms device onboarding. New devices can be set up remotely to a standard configuration - the right apps, the right security settings, the right network access - without a technician touching each machine individually. A new staff member's laptop arrives configured and ready.
Frequently Asked Questions
How far in advance should IT onboarding start?
Before the new employee's first day, not on it. Their account, licences, group memberships, and device should ideally be ready to go before they walk in, so their first day is spent working rather than waiting on IT.
What is the 'principle of least privilege' and why does it matter for a new hire?
It means giving a new staff member only the access their specific role actually needs, not a copy of whoever's account was easiest to clone. It matters because over-provisioned access is one of the most common ways a single compromised account turns into a much bigger breach.
Does a new employee really need a security briefing on day one?
It's worth doing early, even if brief, a 15-minute conversation covering how to spot phishing, the password policy, and who to contact if something looks wrong covers most of what matters. It's a small time investment that closes an obvious early gap before bad habits form.
How does good onboarding make offboarding easier later?
If every account created and every system access granted during onboarding is documented at the time, offboarding becomes a matter of working through that same list rather than trying to remember everything a departing staff member had access to. Keeping a simple access register per employee is the easiest way to make sure nothing gets missed later.
Consistent onboarding, device setup, and ongoing support are all handled for you under our managed IT service plans.
Managed IT Services →Want a standardised IT onboarding process for your Perth business?
Call 0433 087 091 - we'll build and document an onboarding and offboarding process that works every time.
Get in TouchFor related reading, see our Employee Offboarding Checklist for Microsoft 365 and IT Support for Small Business in Perth.