HomeServicesManaged IT ServicesClaude DeploymentInsightsAnswersAboutContact
Managed IT & administration

How should a small business set up Microsoft 365 from scratch?

By Accred Consulting Microsoft 365 Practice | Company facts

Short answer

Pick the right licence, usually Business Premium for security, then add your domain and DNS records, create separate admin and emergency access accounts, and turn on MFA for everyone. Set up email authentication and Defender protection, enroll devices in Intune, move files into a planned Teams and SharePoint structure, and write down what you did. Doing security on day one is far easier than adding it later.

Key facts

  • Business Premium includes Intune, Entra ID P1 and Defender for Business for up to 300 users.
  • Security is easiest to set up before users start working in the tenant.
  • Use a separate admin account and two emergency access accounts from the start.
  • SPF, DKIM and DMARC should be published as soon as the domain is added.
  • A simple Teams and SharePoint plan prevents file sprawl later.

Choose licences and create the tenant

Microsoft 365 business plans cover organizations of up to 300 users. Business Basic gives web and mobile apps with email and Teams. Business Standard adds desktop Office apps. Business Premium adds Intune, Entra ID P1 with Conditional Access and Defender for Business, which is why it is the usual choice for businesses that handle client data or need to meet insurance requirements.

When you create the tenant, the onmicrosoft.com name is permanent, so choose it with care. Set the organization profile, billing contacts and technical contacts, and make sure more than one person can reach the billing account.

Domain, DNS and email

Add your custom domain in the Microsoft 365 admin center and verify it. Then publish the records Microsoft lists: MX, Autodiscover and the SPF TXT record. Turn on DKIM for the domain in the Defender portal and publish a DMARC record starting in monitor mode. If you are moving from another provider, plan the MX cutover and migrate mail before switching.

  • Keep DNS registrar credentials secure and protected with MFA.
  • List every service that will send mail as your domain, such as a CRM or invoicing tool, and add it to SPF and DKIM.
  • Apply the Standard or Strict preset security policies in Defender for Office 365 or Exchange Online Protection.
  • Turn off automatic external forwarding.

Identity and admin accounts

Create a separate admin account for each person who manages the tenant, and keep daily work on a normal account. Create two cloud-only emergency access accounts protected with security keys, and store the keys safely.

Turn on MFA for every user before they start working. Security defaults are the minimum. With Business Premium, use Conditional Access instead: require MFA for all users, block legacy authentication, and require stronger methods for admins. Enable self-service password reset so users can recover on their own.

Devices, files and collaboration

Enroll company Windows PCs in Intune, ideally with Windows Autopilot, and Macs through Apple Business Manager. Apply a baseline: BitLocker or FileVault, Defender, update rings and a compliance policy. Protect personal phones with app protection policies rather than full enrollment.

Plan Teams and SharePoint before people start saving files. A small business often needs a company-wide site, one team per department or function, and sites for restricted areas such as finance or HR. Use OneDrive Known Folder Move so desktops and documents are backed up to the cloud.

WeekFocus
Week 1Licences, domain, DNS, admin and emergency accounts, MFA
Week 2Email security, sharing settings, Teams and SharePoint structure
Week 3Devices in Intune, app protection, data migration
Week 4User training, documentation, review and fixes

Finish with the basics most people skip

Confirm the unified audit log is on. Set SharePoint and OneDrive external sharing to the level you actually need. Decide whether you need a third-party backup. Write down the setup: domains, DNS records, admins, policies and vendor contacts, and keep a copy outside the tenant.

Typical small business setups take two to six weeks, depending on user count, data to migrate, devices and how quickly decisions are made. The schedule is set after a short discovery.

How Accred Consulting approaches it

Accred Consulting sets up new Microsoft 365 tenants for small businesses as a fixed-scope project. Discovery covers your users, devices, data, existing mail and file systems and any compliance or insurance needs. The proposal sets a clear scope, fixed price and timeline. US-based specialists then configure licences, domain and DNS, admin and emergency accounts, MFA and Conditional Access, email security, Intune and the Teams and SharePoint structure, and migrate existing data. Handover includes documentation and knowledge transfer, with optional support retainers for ongoing administration.

Track record: 475+ client projects, 2,000+ migration workstreams and 210,000+ users migrated by a US-based team. Company facts · Case studies

Related questions

For most businesses that handle client or financial data, yes. It adds Intune device management, Conditional Access and Defender for Business to Business Standard, which covers controls cyber insurers and clients increasingly ask for. Very small teams with no sensitive data sometimes start on Business Standard with security defaults.
Yes, the admin center makes basic setup straightforward. The risk is skipping security and structure steps that are hard to fix later, such as MFA, admin separation, email authentication and file layout. Following a checklist, or having a specialist review your setup, avoids most of the common problems.
It is the initial domain Microsoft creates with the tenant, such as yourcompany.onmicrosoft.com. You add your own domain for email and sign-in, so users rarely see it. The initial name cannot be renamed later in most cases, and it can appear in some SharePoint URLs, so choose it carefully.

Want this scoped for your environment?

Book a free consultation. After discovery you get a written plan with scope, a fixed price and a timeline.

Book a free consultation