Home > Articles > Information Technology

How IT Pros Can Automate the Employee Onboarding Process

  • Print
  • + Share This
Adam Bertram explains the advantages of automating the processes involved in onboarding a new employee. Most of the initial steps in outfitting a new staffer are identical, regardless of the new hire's position. So why are we repeating those steps by hand when we could automate the process?
Like this article? We recommend

Any growing organization hires new people; depending on size, possibly a lot of people. The employee onboarding process is typically cut-and-dried, the same across all employees. The process can be run off a checklist and followed the same way for every employee. If your organization has an IT staff, why not take advantage of their expertise, and automate as much of your onboarding process as possible?

Once employees are hired, the onboarding process usually includes the same basic needs for each employee:

  • HR setup
  • Employee badge
  • Company key
  • Computer and software
  • Active Directory (AD) user account and security groups
  • Email mailbox
  • Home folder

And so on. Every employee's onboarding process is probably the same, making this kind of scenario ripe for automation. Unfortunately, the entire process cannot be automated, due to the physical nature of certain tasks, but an astute IT professional will automate wherever possible. Fully automating a process like this requires five steps:

  1. Document the current manual process.
  2. Eliminate tasks you can't automate.
  3. Document each step in detail.
  4. Script the process.
  5. Document any manual processes.

Step 1: Document the Current Manual Process

When working on any automation project, we must first thoroughly understand the "moving parts" inside the current process and document everything as is. What does each function in the process do? How does each function relate to the other functions? This step is all about pounding the pavement, talking with people involved in the process (HR, IT, Operations, etc.), and gathering all the information you can about the process as a whole.

Step 2: Eliminate Tasks You Can't Automate

As we've already noted, IT professionals can't automate the entire onboarding process. For example, setting up the employee in the HR system is part of the Human Resources role. Operations probably assigns a badge/keycard or office key. But IT is likely to give new staffers their computers, get their Active Directory accounts set up, create mailboxes, and so on.

This step is all about eliminating tasks that IT staff can't automate, so they're not bogged down by details that aren't their responsibility.

Step 3: Document Each Step in Detail

Once you have a good picture of the entire process, and you've eliminated anything obvious that can't be automated, it's time to thoroughly document what is needed to accomplish each task in the process chain. What does thoroughly mean? Documenting at least these minimum questions and their answers:

  • What kind of input is required for the task?
  • What applications are used in the process?
  • Who uses these applications?
  • What screens are used in these applications? (Preferably documented with screenshots.)
  • What is the desired result once the task is done? How is it presented?

I can't stress enough the level of detail required for each task if you want to succeed at automating any process—not just an employee onboarding process.

Step 4: Script the Process

Some people want to begin banging out code immediately, without going through the process I've outlined to this point, but I encourage you to resist that temptation. If you haven't followed steps 1–3 before you start coding, you'll be sorry. Your code will not account for numerous scenarios, and you'll have to put in Band-Aids and hacks, eventually turning your code into a giant ball of script that no one can understand. (Not even you.)

If you completed steps 1–3, however, you've defined the entire onboarding process and detailed what it currently takes for each task to happen. Great! The next step is to get scripting. But wait—what kind of scripting? Do you have Linux systems that require some kind of interaction in a task? You might have to learn Python. Perhaps your organization uses only Windows systems. In that case, Windows PowerShell is your go-to language. For this example, I'm assuming no Linux interaction, and concentrating solely on Windows PowerShell. My scripting process will consist of the following tasks:

  1. Provision a new computer.
  2. Install applications.
  3. Create email mailboxes and Active Directory users.
  4. Add user accounts to groups.
  5. Create a home folder.

Task 1: Provision a New Computer

Most Windows-based organizations have Active Directory. A common task is adding a computer to the Active Directory domain and moving it into a particular organizational unit (OU). Rather than joining the computer to the domain and then manually moving it into the appropriate OU, why not pre-stage the computer account inside the correct OU before it's even joined?

With a single line in PowerShell, you can simply use the New-AdComputer cmdlet to add a computer into the HrDept OU, for example:

New-ADComputer -Name "HRCOMPUTER" -SamAccountName "HRCOMPUTER" -Path "OU=HrDept,DC=domain,DC=local"

When the computer is delivered and joined to the domain, it will already be in the correct OU.

Task 2: Install Applications

PowerShell can automate application installations in many ways. Some modules are already in PowerShell, such as OneGet. Third-party products like Boxstarter can greatly speed up application installs. Once you have the applications documented in earlier steps, it's just a matter of deciding how the application installs will be chained together. Perhaps you have already created operating system images. In that case, install the applications onto the OS image and get it deployed.

Task 3: Create Email Mailboxes and Active Directory Users

If you're using a product like Microsoft Exchange, you can easily automate just about every part of the mailbox provisioning process. By using the Windows PowerShell New-Mailbox cmdlet, you can easily create a new Exchange mailbox and the corresponding new Active Directory user account at the same time. It's extremely convenient.

By using various PowerShell modules that come with products like Exchange, you can generally automate just about any manual task. For example:

$password = Read-Host "Enter password" -AsSecureString
New-Mailbox -UserPrincipalName chris@contoso.com -Alias chris 
-Database "Mailbox Database 1" -Name ChrisAshton -OrganizationalUnit Users 
-Password $password -FirstName Chris -LastName Ashton -DisplayName "Chris Ashton" 
-ResetPasswordOnNextLogon $true

The PowerShell cmdlets that come with Microsoft Exchange are wonderful. Because Exchange was the first Microsoft product team to introduce PowerShell integration, these cmdlets are the most mature.

Task 4: Add User Accounts to Groups

Once an Active Directory account is created, a common task is to add that account to one or more Active Directory security groups. This process can sometimes be a pain in Active Directory Users and Computers (ADUC) because you have to find the user account, click around a little bit, find the right tab, and finally add one or more groups to the user account. Major waste of time. With PowerShell, you can use the Add-AdGroupMember cmdlet to add a user to multiple groups. The following example, adds newemployee to four different groups:

$Groups = 'group1','group2','group3','group4'
$Username = 'newemployee'
foreach ($Group in $Groups) {
Add-AdGroupMember -Identity $Group -Members $Username
}

Using simple PowerShell constructs is an easy way to add a user account to multiple different groups.

Task 5: Create a Home Folder

Finally, you can use PowerShell to create a home folder. Home folders are typically folders (located on a file server) that contain personal files for the employee. This common task can be performed easily with a scripting language like PowerShell; it's trivial, requiring just a few lines of PowerShell code.

In addition to creating the folder automatically, we can add various checks and error-control routines with the Test-Path cmdlet; for example, ensuring that the parent folder is available, the file server has enough space to accommodate the new employee's home folder, and so on:

$Username = 'newemployee'
$BaseHomeFolderPath = '\\fileserver\homefolders'

$HomeFolder = "$BaseHomeFolderPath\$Username"
if (!(Test-Path -Path $HomeFolder)) {
mkdir $HomeFolder | Out-Null
}

Set-AdUser -Identity $Username -HomeDrive 'H' -HomeDirectory $HomeFolder

This example checks whether a user's home folder exists. If not, the script creates it. It then ensures that the specified username is set for that home folder and maps to the H drive.

Step 5: Document Any Manual Processes

The rest is up to you. Since we can't automate every piece of the onboarding process, the next best thing is thoroughly documenting everything else that needs to happen. This list might include giving new employees office supplies, providing training, or whatever else is specific to your organization.

Final Thoughts

A set of dependent tasks with lots of "moving parts," like an employee onboarding process, can seem daunting. As an IT professional, you can't automate the entire process, but you can take responsibility for automating your part of the process. Follow the steps discussed here, and take these examples to heart. Take the time to fully understand all the "moving parts" and then automate everything you can. Automating not only prevents you from performing the same mundane processes all the time, but also helps your organization by saving your time. We all know that time equals money, and every organization likes saving money!

  • + Share This
  • 🔖 Save To Your Account

InformIT Promotional Mailings & Special Offers

I would like to receive exclusive offers and hear about products from InformIT and its family of brands. I can unsubscribe at any time.

Overview


Pearson Education, Inc., 221 River Street, Hoboken, New Jersey 07030, (Pearson) presents this site to provide information about products and services that can be purchased through this site.

This privacy notice provides an overview of our commitment to privacy and describes how we collect, protect, use and share personal information collected through this site. Please note that other Pearson websites and online products and services have their own separate privacy policies.

Collection and Use of Information


To conduct business and deliver products and services, Pearson collects and uses personal information in several ways in connection with this site, including:

Questions and Inquiries

For inquiries and questions, we collect the inquiry or question, together with name, contact details (email address, phone number and mailing address) and any other additional information voluntarily submitted to us through a Contact Us form or an email. We use this information to address the inquiry and respond to the question.

Online Store

For orders and purchases placed through our online store on this site, we collect order details, name, institution name and address (if applicable), email address, phone number, shipping and billing addresses, credit/debit card information, shipping options and any instructions. We use this information to complete transactions, fulfill orders, communicate with individuals placing orders or visiting the online store, and for related purposes.

Surveys

Pearson may offer opportunities to provide feedback or participate in surveys, including surveys evaluating Pearson products, services or sites. Participation is voluntary. Pearson collects information requested in the survey questions and uses the information to evaluate, support, maintain and improve products, services or sites, develop new products and services, conduct educational research and for other purposes specified in the survey.

Contests and Drawings

Occasionally, we may sponsor a contest or drawing. Participation is optional. Pearson collects name, contact information and other information specified on the entry form for the contest or drawing to conduct the contest or drawing. Pearson may collect additional personal information from the winners of a contest or drawing in order to award the prize and for tax reporting purposes, as required by law.

Newsletters

If you have elected to receive email newsletters or promotional mailings and special offers but want to unsubscribe, simply email information@informit.com.

Service Announcements

On rare occasions it is necessary to send out a strictly service related announcement. For instance, if our service is temporarily suspended for maintenance we might send users an email. Generally, users may not opt-out of these communications, though they can deactivate their account information. However, these communications are not promotional in nature.

Customer Service

We communicate with users on a regular basis to provide requested services and in regard to issues relating to their account we reply via email or phone in accordance with the users' wishes when a user submits their information through our Contact Us form.

Other Collection and Use of Information


Application and System Logs

Pearson automatically collects log data to help ensure the delivery, availability and security of this site. Log data may include technical information about how a user or visitor connected to this site, such as browser type, type of computer/device, operating system, internet service provider and IP address. We use this information for support purposes and to monitor the health of the site, identify problems, improve service, detect unauthorized access and fraudulent activity, prevent and respond to security incidents and appropriately scale computing resources.

Web Analytics

Pearson may use third party web trend analytical services, including Google Analytics, to collect visitor information, such as IP addresses, browser types, referring pages, pages visited and time spent on a particular site. While these analytical services collect and report information on an anonymous basis, they may use cookies to gather web trend information. The information gathered may enable Pearson (but not the third party web trend services) to link information with application and system log data. Pearson uses this information for system administration and to identify problems, improve service, detect unauthorized access and fraudulent activity, prevent and respond to security incidents, appropriately scale computing resources and otherwise support and deliver this site and its services.

Cookies and Related Technologies

This site uses cookies and similar technologies to personalize content, measure traffic patterns, control security, track use and access of information on this site, and provide interest-based messages and advertising. Users can manage and block the use of cookies through their browser. Disabling or blocking certain cookies may limit the functionality of this site.

Do Not Track

This site currently does not respond to Do Not Track signals.

Security


Pearson uses appropriate physical, administrative and technical security measures to protect personal information from unauthorized access, use and disclosure.

Children


This site is not directed to children under the age of 13.

Marketing


Pearson may send or direct marketing communications to users, provided that

  • Pearson will not use personal information collected or processed as a K-12 school service provider for the purpose of directed or targeted advertising.
  • Such marketing is consistent with applicable law and Pearson's legal obligations.
  • Pearson will not knowingly direct or send marketing communications to an individual who has expressed a preference not to receive marketing.
  • Where required by applicable law, express or implied consent to marketing exists and has not been withdrawn.

Pearson may provide personal information to a third party service provider on a restricted basis to provide marketing solely on behalf of Pearson or an affiliate or customer for whom Pearson is a service provider. Marketing preferences may be changed at any time.

Correcting/Updating Personal Information


If a user's personally identifiable information changes (such as your postal address or email address), we provide a way to correct or update that user's personal data provided to us. This can be done on the Account page. If a user no longer desires our service and desires to delete his or her account, please contact us at customer-service@informit.com and we will process the deletion of a user's account.

Choice/Opt-out


Users can always make an informed choice as to whether they should proceed with certain services offered by InformIT. If you choose to remove yourself from our mailing list(s) simply visit the following page and uncheck any communication you no longer want to receive: www.informit.com/u.aspx.

Sale of Personal Information


Pearson does not rent or sell personal information in exchange for any payment of money.

While Pearson does not sell personal information, as defined in Nevada law, Nevada residents may email a request for no sale of their personal information to NevadaDesignatedRequest@pearson.com.

Supplemental Privacy Statement for California Residents


California residents should read our Supplemental privacy statement for California residents in conjunction with this Privacy Notice. The Supplemental privacy statement for California residents explains Pearson's commitment to comply with California law and applies to personal information of California residents collected in connection with this site and the Services.

Sharing and Disclosure


Pearson may disclose personal information, as follows:

  • As required by law.
  • With the consent of the individual (or their parent, if the individual is a minor)
  • In response to a subpoena, court order or legal process, to the extent permitted or required by law
  • To protect the security and safety of individuals, data, assets and systems, consistent with applicable law
  • In connection the sale, joint venture or other transfer of some or all of its company or assets, subject to the provisions of this Privacy Notice
  • To investigate or address actual or suspected fraud or other illegal activities
  • To exercise its legal rights, including enforcement of the Terms of Use for this site or another contract
  • To affiliated Pearson companies and other companies and organizations who perform work for Pearson and are obligated to protect the privacy of personal information consistent with this Privacy Notice
  • To a school, organization, company or government agency, where Pearson collects or processes the personal information in a school setting or on behalf of such organization, company or government agency.

Links


This web site contains links to other sites. Please be aware that we are not responsible for the privacy practices of such other sites. We encourage our users to be aware when they leave our site and to read the privacy statements of each and every web site that collects Personal Information. This privacy statement applies solely to information collected by this web site.

Requests and Contact


Please contact us about this Privacy Notice or if you have any requests or questions relating to the privacy of your personal information.

Changes to this Privacy Notice


We may revise this Privacy Notice through an updated posting. We will identify the effective date of the revision in the posting. Often, updates are made to provide greater clarity or to comply with changes in regulatory requirements. If the updates involve material changes to the collection, protection, use or disclosure of Personal Information, Pearson will provide notice of the change through a conspicuous notice on this site or other appropriate way. Continued use of the site after the effective date of a posted revision evidences acceptance. Please contact us if you have questions or concerns about the Privacy Notice or any objection to any revisions.

Last Update: November 17, 2020