For your admins though it's worth remembering: set a randomly generated password for the employee rather than pushing them down the "welcome email" route