Phase 1: Preparation & Prerequisites

Before you start, ensure you have the following ready to avoid session timeouts:

• A Domain Name: You must own a domain (e.g., yourname.com). You’ll need the login credentials for your DNS provider (GoDaddy, Cloudflare, etc.).

• An Alternate Email: A non-Microsoft email (like Gmail) for account recovery.

• Phone for MFA: Download the Microsoft Authenticator app to set up Multi-Factor Authentication immediately.

Phase 2: Create the Tenancy

1. Select a Plan: Visit the Microsoft 365 Business page and choose between Basic, Standard, or Premium.

2. Identity Setup: You will be asked for a "tenant name." This creates your initial technical domain: yourcompany.onmicrosoft.com.

3. The Global Admin: Create your primary administrator account.

   Note: This is the "God mode" account. Use a strong, unique password and enable MFA immediately.

Phase 3: Domain Verification (The Technical Part)

To use your professional email (e.g., name@yourcompany.com), you must prove you own the domain.

1. In the Admin Center: Go to Settings > Domains > Add Domain.

2. The TXT Record: Microsoft will provide a value starting with MS=ms########.

3. Update DNS: Login to your domain registrar (like GoDaddy or Namecheap) and add a new TXT Record.

   • Host/Name: @

   • Value: Paste the MS=... code from Microsoft.

   • TTL: 3600 (or default).

4. Verify: Go back to the Microsoft portal and click Verify. It may take 10-15 minutes to propagate.

Phase 4: Configure DNS Records for Services

Once verified, you must point your domain’s traffic to Microsoft’s servers. The Setup Wizard will offer to do this for you (if using major registrars like GoDaddy) or give you the records manually:

• MX Record: Directs your email to Outlook.

• CNAME (autodiscover): Allows users to sign in to Outlook/Teams by just entering their email.

• TXT (SPF): Prevents your emails from being marked as spam by verifying your "authorized" senders.

Phase 5: User & License Management

1. Add Users: Go to Users > Active Users > Add a user.

2. Assign Licenses: You must check the box for the specific M365 license you purchased, otherwise, the user will have an account but no access to Word, Excel, or Email.

3. Roles: Assign "User" roles to employees. Avoid giving "Global Admin" rights to everyone; follow the Principle of Least Privilege.

Phase 6: Software Deployment

• Web Portal: Users can log in at portal.office.com to use web versions.

• Desktop Apps: For Standard/Premium users, go to the top right of the portal and click Install Apps.

• Mobile: Download Outlook and Teams from the App Store/Play Store and sign in with the organizational email.

Troubleshooting Common Issues

• DNS Propagation: If verification fails, wait. DNS changes can sometimes take up to 24-48 hours, though usually, they are instant.

• License Conflict: If a user can't see the "Install" button, ensure you didn't just create the user, but actually assigned a license in the Billing/Licenses tab.