Randtech I.T.

Tag: IT Setup

  • IT setup checklist for a new business in South Africa

    IT setup checklist for a new business in South Africa

    Introduction

    Starting a new business in South Africa means juggling customers, compliance and cashflow. One critical area that’s often underestimated is IT. Getting your technology right from day one reduces costly downtime, protects client data and keeps your team productive. This IT setup checklist for a new business walks South African small and medium-sized businesses through practical steps to set up reliable, secure and scalable IT.

    1. Define your business needs

    A clear understanding of needs prevents over- or under-investment. Start by answering core questions:

    • What applications will staff use daily (email, accounting, CRM)?
    • How many users and devices will you support now and in 12–24 months?
    • What regulatory or industry requirements apply (POPIA, financial reporting)?

    Documenting these requirements informs choices on hardware, connectivity, cloud services and security.

    2. Hardware and devices

    Choose devices that match job roles and budget. Prioritise reliability and warranty support.

    Essential hardware

    • Business-grade laptops or desktops with adequate RAM and SSD storage.
    • Peripherals: monitors, keyboards, mice, headsets for remote calls.
    • Network hardware: a business-class router and managed switch if you have multiple wired devices.
    • Uninterruptible Power Supplies (UPS) for critical equipment like servers and core networking devices, especially in areas prone to load-shedding.

    Local considerations

    In Gauteng and Johannesburg, expect stable metropolitan connectivity but plan for load-shedding and occasional outages. UPS and graceful shutdown procedures protect data and hardware.

    3. Internet and networking

    Connectivity is business-critical. Treat your network as a priority, not an afterthought.

    Choose the right connection

    • Assess available links: fibre, fixed wireless, LTE. Fibre is ideal where available for its reliability and speed.
    • Consider a secondary backup connection (LTE) for failover during primary outages.

    Secure your network

    • Use business-class firewalls and enable regular firmware updates.
    • Separate guest Wi‑Fi from internal networks and use WPA3 if supported.

    4. Cloud services and software

    Cloud services reduce upfront costs and simplify management, but choose and configure them carefully.

    Common cloud choices

    • Email and collaboration: Microsoft 365 or Google Workspace for business email, calendars and document collaboration.
    • Accounting: cloud accounting software that integrates with your bank and tax workflows.
    • File storage and backups: choose a cloud storage provider with versioning and encryption.

    Licence and cost control

    Purchase business licences rather than consumer plans for support and compliance. Track licences centrally to avoid unexpected renewals or gaps.

    5. Security and compliance

    Security is not optional. Implement layered controls to protect data and reputation.

    Technical controls

    • Endpoint protection: install reputable antivirus/EDR on all devices.
    • Multi-factor authentication (MFA): enforce MFA for email, admin accounts and cloud services.
    • Patch management: ensure operating systems and applications receive timely updates.

    Policies and awareness

    • Create clear acceptable use, password and remote access policies.
    • Train staff on phishing, social engineering and safe data handling—regular short sessions are more effective than one-off training.

    6. Backup and disaster recovery

    Backups are your last line of defence against data loss and ransomware. Make a plan and test it.

    Backup best practices

    • 3-2-1 rule: keep at least three copies of data, on two different media, with one offsite copy.
    • Automate backups and verify restorability with periodic restore tests.
    • Consider cloud backups with immutable snapshots to protect against ransomware.

    7. User accounts and permissions

    Limit privileges and centralise account management.

    Account setup

    • Create individual user accounts—avoid shared logins for accountability.
    • Use role-based access controls (RBAC) to grant least privilege required for tasks.
    • Regularly review and deactivate accounts for former staff or contractors.

    8. Backup communications and continuity planning

    Prepare for scenarios where normal channels fail. A simple continuity plan reduces panic and enables faster recovery.

    Practical steps

    • Maintain an emergency contact list with vendors, ISP and key staff numbers.
    • Document recovery procedures for critical systems and store them securely offline.
    • Plan for remote work contingencies with VPN or secure remote desktop solutions.

    9. Vendor selection and contracts

    Choose suppliers who understand SME needs and offer clear SLAs.

    What to look for

    • Fast response times and experienced engineers—avoid suppliers that learn on your time.
    • Clear pricing and scope for installation, support and maintenance.
    • References from local businesses and experience with South African compliance (POPIA).

    10. Ongoing management and monitoring

    IT setup is not a one-time task. Continuous management keeps systems healthy.

    Recommended activities

    • Implement remote monitoring and management (RMM) for proactive alerts.
    • Schedule regular maintenance windows for updates and reviews.
    • Conduct annual IT reviews aligned to business growth plans and budgets in ZAR.

    FAQ

    How much should a small business budget for initial IT setup?

    Costs vary by requirements. Budget for reliable hardware, business internet, licensing and a basic security stack. Get quotes tailored to your user count and services rather than relying on off-the-shelf estimates.

    Do I need an on-premises server?

    Most new SMEs can use cloud services instead of on-premises servers. Consider local servers only if you have specific latency, compliance or legacy application needs.

    How often should backups be tested?

    Test backups at least quarterly, or more frequently for critical systems. A verified restore is the only proof a backup strategy works.

    Can I use consumer-grade Wi‑Fi and equipment?

    Consumer devices may be cheaper but lack business features, security and support. For reliability and manageability, choose business-grade networking equipment.

    What is the minimum security I should implement on day one?

    At minimum: enforce MFA, install endpoint protection, keep systems patched, and implement secure passwords and account controls.

    Conclusion

    An organised IT setup protects your new business from avoidable downtime, security incidents and unnecessary costs. Addressing hardware, connectivity, cloud choices, security and backups from the start makes IT an enabler for growth, not a recurring headache.

    If you need practical, experienced help to implement this IT setup checklist for your South African business, RandTech IT can assist. Our engineers prioritise fast, expert resolution so you can focus on running your business—contact RandTech IT to get started.

  • Microsoft 365 setup checklist for South African small businesses

    Microsoft 365 setup checklist for South African small businesses

    Introduction

    Implementing Microsoft 365 can transform productivity for South African small and medium-sized businesses (SMBs). But a rushed or incomplete setup risks security gaps, licence waste and user frustration. This practical checklist helps owners and IT decision-makers complete a reliable Microsoft 365 setup—covering licensing, identity, email, devices, security and governance—with South African business realities in mind.

    1. Plan and choose the right licences

    Start with a clear understanding of business needs: email, Office apps, Teams collaboration, file storage, compliance and security features. Picking the correct licence tier avoids overspending and ensures required features are available.

    Assess user requirements

    • List typical roles (administrators, managers, sales, remote staff) and required apps.
    • Decide who needs advanced security (e.g. Defender for Office 365) or compliance features.

    Compare common licence options

    Evaluate Microsoft 365 Business Basic, Business Standard, Business Premium and the various Enterprise plans against your list. For many SMBs that handle sensitive client or financial data, Business Premium is often the balanced choice because it bundles essential security features.

    2. Prepare identity and tenant settings

    Identity is central to Microsoft 365. A clean, well-configured tenant reduces administrative overhead and supports secure access.

    Register and verify your domain

    1. Create your Microsoft 365 tenant and add your company domain (e.g. yourcompany.co.za).
    2. Verify domain ownership using DNS records at your registrar or hosting provider.

    Establish identity strategy

    • Decide between cloud-only identities or Azure AD Connect for hybrid environments.
    • Enforce standard username formats (for example, firstname.lastname@yourcompany.co.za) to avoid account conflicts.

    3. Secure access and authentication

    Strong authentication prevents the majority of account compromises. Implement these steps early.

    Enable multi-factor authentication (MFA)

    Turn on MFA for all administrative accounts and enforce it for users. Use conditional access policies to require MFA for high-risk sign-ins and remote access.

    Harden administrative accounts

    • Use separate admin accounts, not everyday accounts, for Global Admin tasks.
    • Limit the number of Global Admins and use privileged identity management where possible.

    4. Configure email and migration

    Email is core for most SMBs. Correct DNS records, migration planning and security policies keep mail flowing and safe.

    Set up Exchange Online

    • Create mailboxes and distribution lists according to your organisational structure.
    • Update MX, SPF, DKIM and DMARC records in DNS to protect your domain from spoofing and improve deliverability.

    Plan migrations carefully

    Assess current email size, archive needs and any legacy systems. Test a pilot migration with a small user group, confirm calendar sharing and delegate permissions, then schedule full migration during low-usage windows.

    5. Deploy devices and Office apps

    Consistent app deployment and device management reduce support calls and improve security.

    Roll out Office apps

    • Use Microsoft Endpoint Manager (Intune) or your existing deployment tool to install and keep Office apps up to date.
    • Standardise on supported OS versions to avoid compatibility and security gaps.

    Manage devices

    Enroll company devices into Intune for configuration, update and security policy enforcement. For BYOD, use app protection policies to separate corporate data from personal data.

    6. Implement security and compliance controls

    Microsoft 365 includes many built-in security features. Configure the ones relevant to your risk profile and industry requirements.

    Protect data

    • Configure Data Loss Prevention (DLP) policies for sensitive information such as client ID numbers or financial data.
    • Use sensitivity labels and encryption for confidential documents and emails.

    Defend against threats

    • Enable Defender for Office 365 to reduce phishing and malware risk.
    • Implement safe attachments and safe links policies.

    7. Governance, backup and retention

    Good governance prevents data sprawl and supports regulatory obligations. Backup ensures recoverability beyond native retention options.

    Set retention and archiving

    • Define retention policies for emails and SharePoint/Teams content based on legal and business needs.
    • Enable archiving for users with large mailboxes to reduce costs and improve performance.

    Choose a backup strategy

    Microsoft 365 provides basic versioning and retention but isn’t a substitute for third-party backups. Evaluate backups for Exchange, SharePoint, OneDrive and Teams to meet your recovery point and time objectives.

    8. Train users and document procedures

    Even the best technical setup fails without user buy-in. Provide clear guidance and easy access to support.

    User onboarding

    • Deliver short training sessions on Teams, OneDrive, sharing and security best practices.
    • Create quick-reference guides for common tasks like accessing email offsite or resetting MFA devices.

    Document admin procedures

    Maintain an internal runbook covering licence management, onboarding/offboarding, backup procedures and escalation paths for incidents. Keep it up to date as your environment changes.

    9. Ongoing management and optimisation

    Microsoft 365 is not a set-and-forget service. Regular reviews reduce risk and costs.

    Monitor and report

    • Review security reports, audit logs and licence usage monthly.
    • Adjust licence allocations to avoid paying for unused seats or missing needed features.

    Patch and update

    Schedule regular checks for Windows and Office updates, and confirm device compliance through Intune or your chosen management platform.

    FAQ

    Q: Do I need an IT partner to set up Microsoft 365?
    A: Smaller businesses with in-house IT experience can manage basic setups, but an experienced partner reduces risk, shortens deployment time and ensures secure configuration.

    Q: Which licence is best for my South African SMB?
    A: It depends on your needs. Business Premium is often suitable for SMBs needing Office apps plus enhanced security. Assess requirements before choosing.

    Q: How much does Microsoft 365 cost in South Africa?
    A: Pricing varies by plan and number of users. Consider per-user licence fees plus potential third-party backup or managed service costs when budgeting in Rands.

    Q: Can I migrate from Google Workspace or an on-prem Exchange?
    A: Yes. Both Google Workspace and on-prem Exchange migrations are common. Plan a pilot migration and handle DNS, mail routing and calendar permissions carefully.

    Q: How do I secure remote workers?
    A: Require MFA, use conditional access policies, enrol devices in Intune and apply app protection policies to separate corporate data on personal devices.

    Conclusion

    A structured Microsoft 365 setup checklist helps South African SMBs deploy a secure, manageable and cost-effective environment. Prioritise correct licences, strong identity management, email and migration planning, device control, security controls and ongoing governance. Investing time up front prevents costly remediation later.

    If you’d like practical, experienced assistance implementing Microsoft 365 for your business, contact RandTech IT. Our engineers focus on fast resolution and proven configurations so your team can work securely and productively from day one.