Let a bot set up your business email and check your security every week

🧰 Before you start

• A Grok Bot plan and the Grok Bot app
• Your domain name and the login for where you bought it (your domain provider)
• A business email plan (Microsoft 365 Business or Google Workspace) or the decision to buy one
• Admin access to your website host, so nothing breaks

🪜 Steps (tick as you go)

1. ☐
   1. Make a safety copy of your settings

   Before anything changes, ask the bot to list and save your current domain settings (called DNS records: the address book that tells the internet where your website and email live) into a document.

2. ☐
   2. Connect only what it needs

   In Grok Bot, connect your email admin account and your domain provider. Give it your website host login only if it asks and explains why.

3. ☐
   3. Ask for a plan first

   Paste the 'Email move plan' prompt. Read the plan: it should list each step, what could go wrong and how to undo it.

4. ☐
   4. Approve one step at a time

   Let it add your domain and do the verification. Say yes to each change only when you understand the reason it gives.

5. ☐
   5. Check everything still works

   After the move, send and receive a test email and open your website on your phone. Ask the bot to confirm the website records were not changed.

6. ☐
   6. Set up the weekly check

   Use the 'Weekly IT check' prompt and make it a routine for Monday mornings.

7. ☐
   7. Optional: switch on two-step loginOptional extra

   Ask the bot to walk you through two-step verification (a code on your phone as well as your password) for every staff account.

💬 Prompts to copy

I run [business name], a one-person business. I want my business email (you@[mydomain]) on [Microsoft 365 Business / Google Workspace]. My domain is registered at [provider] and my website is hosted at [host].
First, save a copy of all my current DNS records to a document called 'DNS backup [date]'.
Then write me a step-by-step plan in plain English: what you'll change, why, what could break (especially my website), and how to undo each step.
Don't change anything yet. Wait for my yes on each step, and show me the exact record before you add or edit it.

Every Monday at [9am], check my [Microsoft 365 / Google Workspace] admin settings and my domain.
Tell me in plain English: any unusual sign-ins, accounts without two-step verification, forwarding rules sending mail outside the business, expiring domain or certificates, email security records (SPF, DKIM, DMARC: settings that stop people faking your email) that are missing or wrong, and any security alerts.
For each problem, suggest the fix, say why it matters and how risky it is. Change nothing until I reply yes to that item. If all is fine, send one line saying so.

🔗 Links

• Brad White on X (source): https://x.com/attack_engineer/status/2112312515044520317
• Microsoft Learn: add a custom domain to Microsoft 365: https://learn.microsoft.com/en-us/microsoft-365/admin/setup/add-domain
• Grok Bot docs: approvals, security and privacy: https://docs.x.ai/grok-bot/approvals-security-and-privacy

From https://usecasy.com/use-case/grokbot-one-person-it-desk/ · Guide checked 20 October 2026 · Prices are rough and shown in USD unless stated (MYR where relevant).