Microsoft 365

Microsoft 365

Microsoft 365, properly set up and properly run

Tenant setup, migration, security hardening, license optimization, and day-to-day administration — done right the first time, so it stays out of your way.

What’s included

More than “we set up email”

Most M365 tenants are running on Microsoft defaults from the day they were created. That’s not “secure” — it’s “easy to set up.” We make it secure, organised, and right-sized for what you’re actually paying for.

Tenant setup & migration

New M365 tenant from scratch, or migration in from on-prem Exchange or Google Workspace. Already on M365 with someone else? We don’t need to move you — we’ll just take over administration of your existing tenant.

Security baseline

MFA enforced everywhere, conditional access policies, legacy auth disabled, sharing controls tuned, audit logging on. Microsoft Secure Score from “alarming” to “actually defensible.”

Licensing handled

For our managed IT clients, Microsoft 365 Business Premium licenses are included — one per covered endpoint, bundled into the monthly fee. For standalone engagements, we right-size your existing licensing to match actual use rather than what got sold to you.

Mail flow & deliverability

SPF, DKIM, DMARC configured properly. Anti-spam tuned. Custom mail flow rules where needed. Your mail reaches inboxes, and your domain doesn’t get spoofed.

SharePoint & OneDrive

Site structure that makes sense, permissions that don’t sprawl, sharing settings that match your risk tolerance. Plus migration from network drives or Dropbox-style chaos to something properly organised.

Teams governance

Meeting policies, external sharing controls, app management, naming conventions that don’t end with 47 abandoned Teams nobody can find. Teams used as designed, not as an unmanaged sprawl.

User lifecycle

Onboarding gets new hires into the right groups, with the right licenses, on day one. Offboarding cuts access fast, preserves the mailbox where you need to, and converts the license — no “ghost users” eating budget.

Ongoing admin & troubleshooting

The day-to-day: shared mailbox requests, password resets, mail flow oddities, distribution lists, “why can’t I share this file?” — handled through our ticketing system, not your inbox.

How we work

From whatever you have today, to something defensible

Most engagements start with a tenant that’s been there a while and grown organically. We assess, harden, and then run the steady-state.

1

Tenant assessment

Microsoft Secure Score review, license usage audit, sharing exposure check, mail flow review. You get a written report — what’s configured, what’s missing, what’s costing you money for no reason.

2

Harden & migrate

Security baseline rolled out, license adjustments made, any pending migrations completed. Most tenants are dramatically better off in 30 days.

3

Ongoing admin

Day-to-day tickets handled, periodic Secure Score reviews, M365 changes monitored (Microsoft pushes a lot of these), and license usage checked regularly so you stay right-sized as your team changes.

FAQ

Questions we hear a lot

Anything not covered here? Email us and we’ll answer.

We already have M365 — what would you actually do for us?
Most existing tenants we look at have one or more of these problems: MFA isn’t enforced for everyone, legacy authentication is still on, external sharing is wide open, licenses are mis-sized (paying for E5 across the board when half the users only need Business Standard), and SharePoint has years of unused sites cluttering things. We fix all of that, then keep it fixed.
Can you help us migrate from Google Workspace or on-prem Exchange?
Yes. We’ve done both. Mail, calendars, contacts, and Drive/OneDrive content get migrated with as little user disruption as possible — typically with mailbox cutover scheduled for a weekend and Drive content moved in batches before then. You’ll get a migration plan with timeline and impact called out before we touch anything.
Do we buy our licenses through you, or keep our existing reseller?
For managed IT clients, Microsoft 365 Business Premium licenses are already included as part of the monthly fee — one per covered endpoint, no separate sourcing required. For standalone M365 engagements (or upgrades beyond Business Premium), we can source licenses directly or work alongside your existing reseller. Whatever’s least painful for you.
How is this different from Microsoft’s built-in support?
Microsoft Support is good at “the platform isn’t working.” They’re not going to look at your tenant, tell you your security posture is weak, recommend you drop two E5 licenses, or proactively flag that someone set up auto-forwarding on a mailbox (a common compromise indicator). That’s our job.
What about M365 backup and threat monitoring?
Both included for managed IT clients — M365 backup covers mail, OneDrive, SharePoint, and Teams data so accidental or malicious deletions are recoverable. SaaS threat monitoring watches for unusual logins, mailbox rules, and admin changes that signal compromise. These are usually bundled into the broader managed IT engagement rather than billed separately.
How does pricing work?
For managed IT clients, M365 administration and Microsoft 365 Business Premium licensing are included as part of our managed services — one license per covered endpoint, bundled into the monthly fee. Standalone M365-only engagements (assessment, hardening project, migration) are something we can scope on request. Email us with a description of your tenant and we’ll figure out which approach fits.

Let’s see what your tenant actually looks like.

Email us and we’ll do a free M365 assessment — Secure Score review, license audit, sharing exposure check. You’ll get a written report with our findings, no obligation to act on it.