checklist template · Free download
IT Onboarding & Provisioning Checklist
An IT onboarding and provisioning checklist covering hardware, accounts, access, and security so every new hire is set up, secure, and productive on day one.
Enter your details below to unlock the free PDF and CSV download.
Get your free download
Enter your details — the PDF downloads instantly.
What you get
- A pre-start hardware and account provisioning checklist
- Role-based access and least-privilege guidance
- Security setup: MFA, device encryption, and endpoint protection
- An asset-tracking table to log every device issued
Template preview
A preview of the structure. Download the PDF or CSV for the complete, ready-to-use version.
New hire & IT details
- Employee name
- Role / department
- Start date
- Access profile— role-based template to apply
Hardware & equipment
Order early — shipping to remote hires can take a week or more.
- Order laptop and configure the standard build/image
- Order monitor, dock, keyboard, mouse, and headset
- Enrol device in MDM and enforce encryption
- Install endpoint protection and required agents
Accounts & identity
- Create email and identity-provider (SSO) account
- Add to the correct groups and distribution lists
- Enforce MFA on first sign-in
- Set up password manager and issue temporary credentials
This is a preview — the full template continues in the download.
Enter your details above to download the full template.
How to use this template
- 1
Trigger from the HRIS
Start provisioning as soon as the offer is signed and the start date is set in the HRIS.
- 2
Provision by role
Use the role's access profile to grant least-privilege access to only the tools the job needs.
- 3
Verify before day one
Confirm hardware, accounts, and access work end-to-end the day before the new hire starts.
- 4
Log every asset
Record each device in the asset table so offboarding and audits are straightforward.
Frequently asked questions
When should IT provisioning start?
As soon as the offer is signed. Hardware ordering and shipping — especially to remote hires — are the most common reasons a new starter is blocked on day one.
What is least-privilege access?
Granting only the access a role actually needs, nothing more. Role-based access profiles make this repeatable and make offboarding and audits much cleaner.
How does this connect to offboarding?
The asset register and documented access list become your offboarding checklist — you recover exactly what was issued and revoke exactly what was granted.