How to Set Up Microsoft 365 for a New Philippine Business
Microsoft 365 is the productivity backbone for most Philippine businesses today — email, calendar, Teams, SharePoint, and the full Office suite, all under one subscription. But the initial setup involves more than just signing up. You need to connect your domain, route your email correctly, add your team, and lock down access before anyone touches real data.
This guide walks through every step in order. It assumes you are setting up a new tenant from scratch — no existing Exchange, no on-premise Active Directory migration.
Before You Start
Have these three things ready before you open the Microsoft 365 admin portal:
Your domain name. Microsoft 365 email runs on your own domain (e.g. juan@yourbusiness.com.ph). If you do not have one yet, register it first — .com, .com.ph, or .ph all work. Your domain registrar will need to be accessible during setup so you can update DNS records.
Your headcount. M365 is licensed per user per month. Know how many mailboxes you need on day one. You can add more later, but your initial plan choice affects which features the whole team gets.
A payment method. Microsoft bills in USD. Business plans are monthly or annual. Annual commitment gives roughly 20% savings — take it if you are confident in the seat count.
Step 1: Choose the Right Microsoft 365 Plan
For most Philippine SMEs, three plans cover the field:
| Plan | Monthly price (per user) | What you get |
|---|---|---|
| Business Basic | ~$7 | Web-only Office apps · Exchange email · Teams · OneDrive · SharePoint |
| Business Standard | ~$14 | Everything in Basic + desktop Office apps (Word, Excel, PowerPoint) |
| Business Premium | ~$26 | Everything in Standard + Intune device management + Entra ID P1 + Defender |
Business Basic suits teams that work primarily in a browser — Google-style, but on Microsoft. Business Standard is the practical default for most offices: everyone gets installed apps and full collaboration features. Business Premium makes sense when you need device management, conditional access, or are in a regulated industry (banking, healthcare, professional services).
Microsoft 365 pricing is increasing on July 1, 2026. If you are setting up now, locking in an annual plan at current rates saves you 15–20% versus month-to-month after the hike. See the full breakdown.
Step 2: Buy Through a Microsoft CSP Partner
You can purchase M365 directly from Microsoft at microsoft.com, but for Philippine businesses there are practical reasons to go through a Cloud Solution Provider (CSP) instead:
- Local billing support. CSPs can invoice in Philippine pesos, issue official receipts, and process through local payment channels — which matters for BIR documentation.
- Faster escalation. A CSP with a Microsoft partnership can open support tickets on your behalf and has direct engineer access for complex issues.
- License flexibility. Add or reduce seats monthly without navigating Microsoft's self-service portal.
- Onboarding assistance. Setup, domain verification, DNS configuration, and initial security hardening are typically included.
When evaluating a CSP, confirm they hold an active Microsoft Partner Network designation and can show their CSP authorization tier.
Step 3: Sign Up and Verify Your Domain
Once you have purchased or started a trial, log in to the Microsoft 365 Admin Center at admin.microsoft.com.
Go to Settings → Domains → Add domain. Enter your domain name and follow the verification wizard.
Microsoft will ask you to prove you own the domain by adding a TXT record to your DNS. Log in to your domain registrar (e.g. GoDaddy, Namecheap, DotPH, or your local registrar) and add the record exactly as shown.
DNS propagation in the Philippines typically completes in 15 minutes to 4 hours through major registrars, but can take up to 48 hours in rare cases. The admin center will check automatically — you can leave it and return.
Once verified, your domain is the foundation for all the steps that follow.
Step 4: Add Users and Assign Licenses
Go to Users → Active Users → Add a user.
Fill in the display name, username (this becomes their email address — e.g. juan.dela.cruz@yourbusiness.com), and assign a license. For bulk setups with more than ten users, use the CSV import option under Add multiple users to create all accounts in one step.
A few decisions to make now:
- Password policy. Set a strong temporary password and require users to change it on first sign-in. Do not share a single password across accounts.
- Admin roles. Designate at least one Global Administrator (ideally two, in case one account is locked). Avoid giving all users admin access.
- Display name convention. Decide on a format (First Last vs. Last, First) before creating accounts — it is tedious to fix later when names are embedded in contacts and calendars.
Step 5: Configure Your Email DNS Records
This is the step most setups get wrong. Until these records are in place, email will not flow correctly.
In the admin center, go to Settings → Domains, select your domain, and open the DNS records tab. Microsoft lists every record you need. Add all of them to your registrar:
MX record — Routes inbound email to Microsoft's servers. Replace any existing MX record pointing to a previous provider. Priority should be set to 0 or the lowest value available.
SPF record (TXT) — Tells receiving mail servers which servers are authorised to send email from your domain. Microsoft's value is v=spf1 include:spf.protection.outlook.com -all. If you send email from other services (e.g. a CRM or marketing platform), you will need to add their include values too.
DKIM — A cryptographic signature that proves emails genuinely came from your domain. Enable it in the Exchange Admin Center under Email authentication. Microsoft will give you two CNAME records to add to your DNS.
Autodiscover CNAME — Allows Outlook desktop and mobile apps to automatically detect your mail server settings. Required if your team uses installed Outlook.
After adding all records, return to the admin center DNS tab and click Check DNS. All items should show green within a few hours. Do not skip DKIM — unauthenticated email from a Philippine domain increasingly lands in spam.
Step 6: Enable Multi-Factor Authentication
This is not optional. Compromised Microsoft 365 accounts are among the most common entry points for business email compromise (BEC) fraud in the Philippines — attackers gain access to an email account and reroute supplier payments.
The fastest way to turn on MFA for the entire organisation:
- In the admin center, go to Settings → Org settings → Security & privacy → Multi-factor authentication.
- Enable Security defaults (the one-click option that enforces MFA for all users and blocks legacy authentication protocols).
Security defaults are free on all M365 plans. If you are on Business Premium and want more granular control — such as exempting specific service accounts or requiring MFA only from outside the office network — use Conditional Access in Entra ID instead.
Users will be prompted to register the Microsoft Authenticator app on their next sign-in. Walk your team through this before go-live; it takes five minutes per person and eliminates the most common account takeover vector.
Step 7: Install Microsoft 365 Apps on Devices
For plans that include desktop apps (Business Standard and above):
- Users can install apps themselves by signing in at microsoft365.com and clicking Install apps.
- Each license allows installation on up to 5 PCs or Macs, 5 tablets, and 5 mobile devices.
- On Windows, the installer handles everything. On Mac, users install the package and sign in with their work account.
For Business Basic (web-only), skip this step — users work entirely in the browser.
What Comes Next
A working M365 tenant with verified email, active users, and MFA is a solid foundation. From here, the most common next steps for Philippine businesses are:
SharePoint and Teams structure. Set up team sites and channels before users start creating their own ad hoc groups. Unmanaged Teams environments become hard to govern quickly.
OneDrive migration. Move files from local shared drives or Google Drive to OneDrive/SharePoint. Microsoft's SharePoint Migration Tool handles this for free.
Intune device enrollment (Business Premium). Enrol company devices so IT can enforce encryption, remote wipe, and compliance policies — particularly important if staff use personal phones for work email.
Backup. Microsoft 365 has a 30-day recycle bin but is not a backup solution. For proper point-in-time recovery, add a third-party backup layer such as Acronis or Veeam for Microsoft 365.
Exchange hybrid (if migrating from on-premise). If you have an existing Exchange server, the migration path is more involved — a hybrid configuration is required before you can move mailboxes.
Setting up Microsoft 365 correctly from the start saves significant rework later. If you would prefer a guided setup or need help with a more complex migration from an existing environment, Technica's cloud team handles M365 deployments for Philippine businesses of all sizes — from five-seat SMEs to multi-branch enterprise rollouts.
