How to Set Up a New Laptop for a Business User

Getting a New Business Laptop Ready

Setting up a new laptop for a business user is more than just switching it on and handing it over. A properly configured device ensures the user is productive from the start, protected from security threats, and compliant with your organisation's IT policies.

Whether you are preparing a device for a new starter, replacing an existing machine, or provisioning laptops for a growing team, this guide walks you through every step.

Step 1: Choose the Right Specification

Before setup begins, make sure the laptop matches the user's needs:

• General office use (email, documents, web) — Intel Core i5 / AMD Ryzen 5, 8 GB RAM, 256 GB SSD
• Power users (large spreadsheets, databases, multiple apps) — Intel Core i7 / AMD Ryzen 7, 16 GB RAM, 512 GB SSD
• Creative or technical roles (design, development, video) — Intel Core i7/i9, 32 GB RAM, 1 TB SSD, dedicated GPU

For UK businesses, reliable business-grade laptops from Dell, Lenovo, and HP typically offer the best balance of performance, durability, and support.

Step 2: Initial Setup and Updates

Power on the laptop and complete the operating system setup:

1. Follow the Windows 11 (or macOS) setup wizard — connect to Wi-Fi, set the region and language
2. Create a local admin account for initial configuration (you will join it to your domain or Entra ID shortly)
3. Run Windows Update (or macOS Software Update) and install all available updates — this may take 30 to 60 minutes and require multiple restarts
4. Update all device drivers using the manufacturer's support tool (Dell SupportAssist, Lenovo Vantage, HP Support Assistant)

Step 3: Join Your Domain or Cloud Directory

Connect the laptop to your organisation's identity and management platform:

Microsoft Entra ID (Cloud-Only)

1. Go to Settings > Accounts > Access work or school
2. Click Connect and select Join this device to Microsoft Entra ID
3. Sign in with the user's Microsoft 365 credentials
4. The device will register and apply your organisation's policies via Intune

On-Premises Active Directory

1. Go to Settings > System > About > Join a domain
2. Enter your domain name and authenticate with domain admin credentials
3. Restart the laptop and log in with the user's domain account

Step 4: Install Security Essentials

Before the user touches the device, ensure it is properly secured:

• Endpoint protection — Deploy your antivirus/EDR solution (Microsoft Defender for Business, SentinelOne, CrowdStrike, etc.)
• Disk encryption — Enable BitLocker (Windows) or FileVault (Mac) and back up the recovery key to your admin console
• Firewall — Confirm Windows Firewall or your third-party firewall is active
• Automatic updates — Configure Windows Update for Business or your patching tool to keep the device current
• Device management — Enrol in Intune, JumpCloud, or your MDM platform for policy enforcement and remote management

Step 5: Install Business Applications

Install the applications the user needs for their role:

• Microsoft 365 apps — Word, Excel, PowerPoint, Outlook, Teams (deploy via the Microsoft 365 admin centre or Intune)
• Web browser — Microsoft Edge (pre-installed) or Google Chrome with managed policies
• Communication tools — Teams, Slack, or Zoom as required
• Line-of-business apps — CRM, accounting, project management, or specialist software
• Password manager — Deploy your organisation's password manager (1Password, Bitwarden, etc.)
• VPN client — Install and configure if the user will work remotely

Where possible, deploy applications through your management platform (Intune, SCCM, or a similar tool) rather than installing manually. This ensures consistency and makes future updates easier.

Step 6: Configure Email and Calendar

Set up the user's email in Outlook or their preferred email client:

1. Open Outlook and sign in with the user's Microsoft 365 credentials
2. The mailbox, calendar, and contacts will sync automatically
3. Set up the email signature with the correct name, title, phone number, and company branding
4. Add any shared mailboxes or calendars relevant to their role

Step 7: Connect Peripherals and Printers

• Connect and test the monitor (check resolution and display scaling)
• Pair Bluetooth keyboard and mouse if applicable
• Add the office printer (via network or print server)
• Test the headset and webcam with a Teams or Zoom test call

Step 8: Final Checks and Handover

Before handing the laptop to the user, run through a final checklist:

• All updates installed and device restarted
• Endpoint protection active and reporting to your management console
• BitLocker/FileVault enabled and recovery key backed up
• All required applications installed and working
• Email, calendar, and files syncing correctly
• Printer and peripherals connected
• MFA registered on the user's phone
• User briefed on IT support contact details and processes

For more on the complete onboarding process, see our IT onboarding checklist for new employees.

If you do not have the in-house capacity to configure and deploy laptops, a managed IT provider can handle everything from procurement through to desk-ready delivery.