Microsoft 365 is one of those tools that sounds simple to set up — just buy some licenses and go, right? In practice, a new 365 tenant has a lot of knobs to turn, and the defaults aren’t always the best choice for a small business. A little time upfront getting the configuration right saves a lot of frustration later.

This guide walks through the key steps in plain English, in the order that makes sense for a small team getting started.

Step 1: Choose the right plan

For most small businesses of 5–20 people, Microsoft 365 Business Standard is the right tier. It includes:

  • Outlook and business email (yourname@yourcompany.com)
  • Teams, SharePoint, and OneDrive
  • The full Office apps (Word, Excel, PowerPoint) on up to 5 devices per user
  • 1TB of cloud storage per user

Business Basic saves a few dollars per user per month but doesn’t include desktop versions of the Office apps — users only get the web versions. If your team needs Excel with macros, Access, or the desktop Outlook experience, Basic isn’t enough.

Business Premium adds advanced security features (Intune device management, Microsoft Defender for Business). If you handle sensitive data or have employees using personal devices for work, Premium is worth the extra cost.

Step 2: Add your domain

When you first create a 365 account, Microsoft gives you a @yourcompany.onmicrosoft.com address. You’ll replace this with your actual business domain.

In the Microsoft 365 Admin Center:

  1. Go to Setup → Domains → Add domain
  2. Enter your domain name (yourcompany.com)
  3. Microsoft gives you TXT or MX records to add to your domain’s DNS settings
  4. Add those records at wherever your domain is registered (GoDaddy, Namecheap, Cloudflare, etc.)
  5. Once verified, Microsoft walks you through updating your MX records to route email through their servers

This step can take 15 minutes to 48 hours depending on how fast your DNS changes propagate. Usually it’s under an hour.

Step 3: Create user accounts

In the Admin Center, go to Users → Active users → Add a user. For each team member:

  • Full name and display name
  • Username (the part before @yourcompany.com)
  • Assign a license
  • Decide whether they need admin permissions (keep admin access limited — only people who need to manage the 365 account should have it)

A few things to set up for each user at account creation:

  • Require them to change their password at first sign-in (the option is in the user creation wizard)
  • Assign them to the correct Microsoft 365 group if you’ve created department groups

Step 4: Configure Teams

Teams is where most day-to-day communication will happen. Before you add everyone, spend 15 minutes thinking about your channel structure.

A simple structure for a small business:

  • General — company-wide announcements
  • Operations — internal ops discussions, scheduling, logistics
  • One channel per major client or project (if your work is client-based)
  • Random — non-work conversation

Resist the temptation to create a channel for every possible topic. Five to ten channels is the right range for a small team. More than that and conversations get fragmented across channels nobody monitors consistently.

Turn off email notifications for Teams by default for your users — the combination of Teams notifications and email notifications for the same messages creates notification overload fast.

Step 5: Set up SharePoint for file storage

OneDrive is for personal files; SharePoint is for shared team files. Create one SharePoint site for your team’s shared documents:

  1. In the Admin Center, go to SharePoint → Create site → Team site
  2. Name it after your company or department
  3. Add team members
  4. Create a folder structure that mirrors how your team actually organizes work — don’t try to be clever; match the folders people already expect

Train your team to save shared files to SharePoint, not to their local desktops or personal OneDrives. This is the most important habit to establish early because recovering from “everything is on someone’s laptop” is painful.

Step 6: Security basics you shouldn’t skip

Three security settings that every small business 365 tenant should enable, and most don’t by default:

Multi-Factor Authentication for all users. In Admin Center → Security → MFA, enable MFA for your entire organization. This means every user confirms their login with a phone app or text code. It’s the single most effective protection against compromised accounts. Takes 20 minutes to set up; prevents the vast majority of account takeover attempts.

Modern Authentication. Make sure Modern Authentication is enabled (it should be by default on new tenants, but verify). This is required for MFA to work properly with the Outlook desktop app.

Disable legacy authentication protocols. Under Security → Conditional Access (if you have the right license tier), block legacy authentication — older protocols like POP3 and IMAP that bypass MFA. Attackers specifically target legacy auth because it sidesteps your MFA protection.

Admin accounts with dedicated admin-only logins. If you have full global admin access, don’t use your regular daily account as your admin account. Create a separate admin-only account that you use only for administrative tasks, and don’t use that account for email or Teams.

Step 7: Migrate existing email

If your team is moving from another email provider (Gmail, Zoho, a previous Exchange server), you’ll need to migrate existing email to the new mailboxes.

For small teams moving from Gmail (Google Workspace): the Microsoft 365 Admin Center has a built-in Google migration tool that transfers email, calendar, and contacts. It runs in the background and typically completes within a day or two for small mailboxes.

For other providers: the process is more manual. Reach out to a Microsoft partner or IT consultant if you’re migrating large mailboxes from a complex environment — this is one area where professional help saves significant time.

Once the basics are set up, 365 tends to run smoothly without much ongoing maintenance for small teams. The initial investment in proper configuration — especially the security steps — is the most important part. Most small business 365 problems come from skipping the security setup, not from anything in the product itself.