IT Onboarding Checklist for New Employees: A Newington Guide

The phone call that prompts this post happens every couple of months, roughly around ten past nine on a Monday morning. A small business in Newington — a solicitor's practice near St Leonard's, a two-partner accountancy above South Clerk Street, a design studio off Nicolson Street — has just brought on a new hire, and the new hire is sitting at a desk with a laptop that won't sign in, an email address that hasn't been created yet, and a case management system that nobody has requested a licence for. Everyone is stressed, half a day is already gone, and the new starter's first impression of the firm is a room full of people apologising.

The fix isn't clever — it's a boring checklist worked through in the week before day one. This is the version we walk Newington small businesses through when we help them set up their IT onboarding process, and the version we quietly execute when we're the ones provisioning a new starter's kit for them.

1. Start Before Day One, Not On It

Everything below takes time — accounts propagate, MFA enrolment emails go out, software licences need paying for, laptops need imaging and updates. If the trigger to start onboarding is the new starter walking in the door, you are already at least half a day behind.

The rule of thumb we give Newington clients is a full working week between "we've signed the offer" and "they start". That gives you enough runway to build the laptop, order any missing hardware, get through Microsoft 365 propagation delays, and catch anything a vendor throws up (case management systems and Sage in particular can be slow to add a seat).

2. The Physical Kit

Standardise this. When every new starter gets the same shortlist of kit, ordering is faster, spares are interchangeable, and support later on is much simpler. For a typical Newington professional-services desk, that shortlist is: a business-grade laptop (14" usually hits the sweet spot for a hybrid worker), one or two external monitors, a dock or hub, a proper keyboard and mouse, and a headset for calls.

Two boring details make an enormous difference on day one. First, image the laptop and install every update before it leaves your hands — including firmware and dock drivers — because the first Windows Update cycle on a fresh machine can eat an entire morning. Second, label the charger. Newington offices tend to be shared spaces converted from tenement flats, chargers wander, and the new starter shouldn't spend day one asking whose plug is whose.

3. Accounts, Email and the Access List

Write down every system the role touches before you provision anything. For a Newington solicitor that might be Microsoft 365, the practice management system, Land Registry search accounts, a document bundling tool, the accounts package, the office VoIP, and the door entry app. For an accountancy: Microsoft 365, Sage or Xero, HMRC agent portal, Companies House, a client portal, and a workflow tool. Missing one is the reason new starters get to day three still asking for logins.

Create each account with the same naming convention. Enable multi-factor authentication on every single one at creation time — not "we'll do it later". Later never happens, and it is much less friction to enrol MFA the first time somebody signs in than to retrofit it on an account they've been using for a month.

4. File Access, Shared Drives and Line-of-Business Software

Group membership is the piece that most small firms get wrong. Instead of adding the new starter to individual folders and shared mailboxes one by one, they should join a role group ("paralegal", "junior accountant", "studio designer") that already has the right access. If those role groups don't exist, the onboarding of the first new hire is the right moment to create them — and it will save days of confusion over the following two years.

For line-of-business software, request the licence early and install it before the machine leaves your desk. Test that the new starter's account can actually open a real file. We have seen more than one Newington practice where the paralegal spent an hour on day one discovering the licence had been ordered but not assigned in the vendor portal.

5. The Security Baseline

Every laptop that leaves for a new starter should ship with the same security baseline configured before it moves. That means: disk encryption on and the recovery key stored somewhere you can actually find it later, a real endpoint protection product installed (not just Defender left alone), the browser configured, a password manager rolled out with a shared vault for team credentials, automatic backups of the user's local documents to a controlled location, and a screen lock timeout that isn't measured in hours.

The password manager is the one small businesses skip most often, and it's the one that pays back fastest. A new starter with a password manager on day one never learns the bad habit of reusing a personal password for a work account, and every account created for them can have a properly random passphrase generated by the tool. It is far easier to install this reflex on day one than to unpick it a year later after a phishing incident. If in doubt, a quick security setup review from someone external is a sensible sanity check.

6. The First-Day Handover

Even a perfectly-provisioned laptop will still throw a couple of first-day questions. Prepare a short, printed one-page cheat sheet: how to sign in, how to reset their own password, who to ring or Teams-message for IT problems, where the office Wi-Fi credentials are, how the printer wants to be spoken to, and what to do if the laptop is lost.

Book fifteen minutes with the new starter after they've had a coffee, walk them through the cheat sheet, watch them sign in successfully to the two or three tools they'll use most, and confirm MFA is enrolled on a phone they will actually carry. Fifteen minutes of your attention on day one saves hours of support tickets for the next month.

7. Plan Offboarding While You're Onboarding

The best moment to think about how to switch off a leaver's access is the moment you're switching a new starter's access on. Newington's professional-services fabric turns over — paralegals move to bigger firms, junior designers go freelance, apprentices finish and go back to studying — and the leaver's old laptop routinely turns up in a drawer six months later, still logged into email.

Keep a simple offboarding checklist next to the onboarding one: revoke MFA and sign-in sessions on the day, disable (don't delete) the mailbox and forward it to a manager for a month, collect the laptop and re-image it, rotate any shared passwords the leaver knew, and note the return of any physical items (keys, door fobs, USB drives). If the machine is being retired rather than reissued, our IT recycling process handles the certified data wipe and the WEEE side, which matters more if the leaver was handling regulated client data.

8. Why This Matters More for a Newington Small Firm

Newington's small-business mix — solicitors, accountancies, GP practices, private clinics, design studios, cafes and boutique shops between the Meadows and Cameron Toll — hires steadily and reasonably quietly. There's no HR department buffering the mistakes, and the new starter usually sits three metres from the partner who hired them. That means every hour of onboarding chaos is visible chaos, and it also means the right checklist done once is genuinely re-usable — the same script runs the next hire, the next, and the one after that. If you'd rather hand the whole thing over on a standing arrangement so it happens the same way every time, that's exactly what our business IT support is set up to cover for Newington, Southside, the Grange and out towards Craigmillar.

And if the new starter's day one goes sideways anyway and you need a laptop, a network drop or an email problem sorted before lunch, our home and office callouts reach Newington quickly from the workshop, and remote support can often get them working before we even leave the door.