How to Set Up Microsoft 365 for Small Business: Step-by-Step

Getting Started with Microsoft 365 for Your Small Business

Microsoft 365 is the standard for business email, document collaboration, and productivity tools. But setting it up correctly — especially migrating from an existing email provider — can be tricky. This guide walks you through every step, from choosing the right plan to enabling the security features most businesses skip.

Step 1: Choose the Right Plan

Step 2: Set Up Your Domain

You'll want professional email addresses (yourname@yourcompany.com), not generic addresses. Here's how:

1. Log into the Microsoft 365 Admin Center at admin.microsoft.com
2. Go to Settings → Domains → Add domain
3. Enter your domain name and verify ownership by adding a TXT record to your DNS
4. Update your MX records to point to Microsoft 365 (this is where email actually switches over)
5. Add the recommended SPF, DKIM, and DMARC records for email security

Step 3: Create User Accounts

Create an account for each employee. Assign appropriate licenses based on their role — not everyone needs the full suite.

• Use the Admin Center → Users → Active Users → Add User flow
• Set strong temporary passwords and require users to change on first login
• Create distribution groups for departments (sales@, support@, etc.)
• Set up shared mailboxes for generic addresses (info@, billing@) — these don't require a separate license

Step 4: Enable Security (Most Businesses Skip This)

The default Microsoft 365 configuration is not secure enough. Enable these settings immediately:

1. Enable MFA for all accounts — Admin Center → Azure AD → Security Defaults. This blocks 99.9% of automated attacks.
2. Set up anti-phishing policies — Microsoft Defender → Anti-phishing → Enable mailbox intelligence and impersonation protection.
3. Enable audit logging — Admin Center → Compliance → Audit → Turn on audit logging.
4. Block legacy authentication — Conditional Access → Block legacy auth protocols. These bypass MFA.
5. Configure data loss prevention (DLP) — Prevent sensitive data (credit cards, SSNs) from being emailed externally.

Step 5: Migrate Your Existing Email

If you're migrating from Gmail, GoDaddy, or another provider, Microsoft provides migration tools in the Admin Center. For large mailboxes (10GB+), consider a staged migration during a weekend.

• From Gmail: Use the Google Workspace migration tool in Admin Center
• From IMAP providers: Use the built-in IMAP migration wizard
• From on-premises Exchange: Use hybrid migration (this usually requires professional help)

Related: What Is Managed IT and Why Do San Antonio Businesses Need It?