🎃 No tricks, just treats: get a free network & security assessment this Halloween. Claim yours
← All articles

Managed IT · October 23, 2026

How to Onboard a Managed IT Provider: A Small Business Owner’s Checklist

Hiring a managed IT provider is only the beginning. The real work is making sure your provider understands your business, can support your employees, and has the right access without taking unnecessary control.

A rushed handoff can leave old administrator accounts active, devices unmonitored, and employees unsure where to get help. A structured onboarding process makes those gaps easier to spot.

Use these steps whether you are moving from another provider or bringing in professional IT support for the first time. The timeline will depend on your business’s size, complexity, and existing documentation.

Step 1: Name an internal owner and define success

Choose one person to coordinate onboarding. This does not need to be your most technical employee. It should be someone who knows the business, can gather information, and has authority to approve decisions.

Also name a backup contact so urgent questions do not sit unanswered.

Before the kickoff meeting, write down three to five outcomes you want. Make them specific:

  • Employees know how to contact the helpdesk.
  • Every in-scope company computer appears in the device inventory.
  • Critical alerts reach the right people.
  • Administrator access is documented and reviewed.
  • Recurring IT problems have an assigned owner.

“Make IT better” is difficult to measure. “Identify why the accounting team loses access to its application” gives everyone a clear starting point.

Step 2: Agree on scope before granting access

Ask for a plain-English explanation of what is included, what is excluded, and where responsibilities overlap.

Work through questions such as:

  • Which users, devices, and locations are covered?
  • What are the helpdesk’s staffed hours?
  • How do employees report urgent issues outside those hours?
  • Does monitoring include response, or only alert generation?
  • Who approves software installations and administrative changes?
  • Who coordinates with your internet and business application vendors?

Do not assume 24/7 monitoring means every support request receives immediate, around-the-clock attention. Monitoring, helpdesk availability, and incident response are different responsibilities.

Create a short responsibility list with an owner for each task. Record any contractual response targets without treating them as guaranteed resolution times.

Step 3: Build a business-first IT inventory

Start with the systems your employees depend on, not just a list of computers.

For each important application, record:

  • What business process it supports.
  • Who uses it.
  • Who owns the vendor relationship.
  • Where the account and subscription information is stored.
  • What happens if the application becomes unavailable.

Then list company laptops, desktops, servers, network equipment, and office locations. Include remote workers and company-owned devices that rarely connect to the office network.

A simple spreadsheet is enough to begin. Useful columns include device name, assigned user, location, operating system, business purpose, and support status.

Flag unknowns rather than guessing. An unidentified computer or an application owned through a former employee’s account is something to investigate, not something to hide.

Step 4: Establish company-controlled access

Your business should retain ownership of its accounts and subscriptions. Your provider should receive appropriate access to manage them.

Check who controls your domain registrar, email administration, business software, and network equipment. Wherever possible, avoid arrangements in which a critical business account depends solely on a provider’s email address.

Use individual administrator accounts instead of shared logins. Require multifactor authentication where supported, and give each person only the access needed.

Transfer credentials through an agreed secure method, such as an approved password manager—not ordinary email or a spreadsheet attachment.

Also document:

  • Who can authorize new administrator access.
  • How temporary access expires.
  • Where emergency access instructions are stored.
  • How access will be removed when the relationship ends.

Have the provider verify access before removing anyone the business still depends on.

Step 5: Plan the handoff and deployment sequence

If you are changing providers, arrange a handoff before the existing agreement ends. Identify the documentation, access, and configuration information that must transfer.

Ask both providers to clarify which monitoring and security tools are installed and who will remove them. Overlapping tools can create conflicts, while removing protection too early can leave a gap.

For new management software, start with a small, representative group of devices. Include an everyday office computer, a remote worker’s laptop, and a device using an important business application.

Confirm that those employees can still work normally before expanding deployment.

Schedule disruptive changes outside critical periods. Month-end accounting, payroll processing, and a major customer deadline are poor times to discover an application compatibility issue.

Step 6: Verify monitoring and prioritize security gaps

Once tools are deployed, ask for evidence that they are working. An installed agent is not necessarily checking in or reporting correctly.

Review:

  • Which devices are actively reporting.
  • Which devices are missing or offline.
  • Whether endpoint detection and response is active on covered devices.
  • Who receives alerts and what happens next.
  • Which systems have pending updates or unsupported software.

Then agree on a short, ranked action list. Prioritize issues by likely business impact, exposure, and urgency—not simply by how easy they are to fix.

For example, an active administrator account belonging to a former employee may deserve attention before an irritating but low-impact workstation setting.

For updates, define a maintenance window, a testing approach, and a process for exceptions. Employees should know when restarts are expected and how to report problems afterward.

Step 7: Launch the helpdesk with clear instructions

A helpdesk cannot help effectively if employees do not know it exists or keep messaging whichever technician they happen to know.

Send a short announcement explaining:

  • When the new support process starts.
  • How to submit a request.
  • What information to include.
  • How to flag a business-stopping issue.
  • Who approves purchases or access changes.

Give employees a simple request template: what happened, when it started, who is affected, the application or device involved, and any error message.

Tell them not to include passwords or unnecessary sensitive information. Screenshots can help, but employees should check them for customer or financial data first.

Submit a test request from an ordinary employee account. Confirm that the acknowledgment arrives, the ticket reaches the correct queue, and the employee can follow up.

Step 8: Close onboarding with an acceptance review

Do not treat onboarding as finished merely because the software installation is complete.

Hold a review against the outcomes from Step 1. Ask your provider to walk through the inventory, access list, monitoring status, support process, and unresolved risks.

Check that:

  • Every in-scope device is accounted for.
  • Exceptions have a reason, owner, and review date.
  • Employees have received helpdesk instructions.
  • Old provider access has been reviewed and removed when appropriate.
  • Outstanding work has a named owner and next action.

Record what remains unfinished. A documented exception is more useful than an unsupported claim that everything is covered.

Agree on an ongoing review cadence to discuss recurring tickets, device changes, security priorities, and upcoming business needs. Managed IT should stay aligned with how your company actually operates.

Request a Free IT Assessment

Preparing to bring a managed IT provider on board? Request a free IT assessment from Tech Architech to discuss your current setup, support needs, and priorities. With offices in Hillsboro, Oregon, and Chicago, Illinois, Tech Architech serves small and medium businesses across the USA.

Learn how Tech Architech can help →

Find out where your IT is costing you.

Book a free, no-pressure IT assessment. You'll get a clear report on risks, quick wins and what it would take to fix them.

Get my free assessment