Microsoft 365 administration and security

We set up your Microsoft 365 tenant properly and look after it, so a small company without an IT department still has managed devices, protected email and tidy accounts.

Most small companies end up with a Microsoft 365 tenant that grew on its own. Licenses were added as people were hired, a few settings were changed to fix a problem and never revisited, and nobody is sure who still has access to what. Often there is no IT team, or one person who has it as a side job.

We start by finding out what is actually configured, then fix the gaps that matter most and leave the rest alone. Changes go out in phases, with the people affected told in advance, so security improves without surprising anyone on a Monday morning.

We also build automation in the same tenant, so we know how an admin setting changes what apps and flows can do. A conditional access rule, a mail policy or a device restriction can quietly break a flow, and we check for that before we change anything.

What we look after

Device management with Intune

Enrol laptops and phones, set enrollment restrictions and apply policies in phases so staff devices are managed without disruption.

Email security with Defender for Office 365

Review and tune anti-phishing, anti-spam and safe link policies, and the block and allow rules that sit alongside them.

Mailbox and account management

Create, change and retire user accounts, mailboxes and licenses, and investigate odd behavior such as unexpected mailbox forwarding.

Clean employee departures

Remove access, convert the mailbox to a shared mailbox where appropriate, and hand over files and email to the right person.

Phishing incident response

Work out who received and who clicked, secure the affected accounts, remove the messages and tighten the policies that let them through.

Email, distribution lists and meeting rooms

Set up domains, mail flow, distribution lists and room resources, including Teams Rooms, with short training for the people who use them.

How we work on a tenant

01

Review the tenant

We go through users, licenses, devices, mail policies and sign-in settings and write down what is in place and what is missing.

02

Fix the priority gaps

We agree a short list of the changes that reduce the most risk or remove the most daily friction, and start there.

03

Roll out changes in phases

Each change goes to a small group first, with notice to staff, so problems show up early and are easy to reverse.

04

Look after it

We handle new starters, departures, policy reviews and incidents as they come up, under an arrangement that suits your size.

Recent work

Clients are described by type. We do not publish client names.

A small services company

The problem. The company had no device management in place and needed its email security and account housekeeping brought up to date.

What we built. A phased Intune rollout with enrollment restrictions, a Defender mail policy review and shared mailboxes for departed users. We also investigated suspicious mailbox forwarding and handled the response to a document-signing phishing attack.

A professional practice

The problem. The practice needed email, distribution lists and a conference room set up, and staff shown how to use them.

What we built. Email and distribution lists set up properly with staff training, a review of spam and block rules, and a Teams Room configured for the conference room.

See our case studies

What we build with: Microsoft 365 · Microsoft Intune · Microsoft Defender for Office 365 · Exchange Online · Microsoft Entra ID · Microsoft Teams Rooms · Power Automate

Common questions

Do we have to buy licenses through you?

No. We are a Microsoft Cloud Solutions Provider, so we can supply and manage licenses if you want one place for it, but we can also work in a tenant whose licenses are bought elsewhere.

Can you work alongside our existing IT provider?

Yes. We can take on a defined part of the work, such as email security or device management, and agree with your provider who owns which settings.

What happens to a mailbox when someone leaves?

Usually we convert it to a shared mailbox so the email is kept and can be handed to a colleague, then remove the person's sign-in and license. What we do depends on what you need to keep, and we agree that with you first.

What should we do if someone clicked a phishing link?

Have the person change their password, report the message and stop using the affected device until it is checked. Then contact whoever administers your tenant so sign-ins, mailbox rules and forwarding can be reviewed.

Do you offer ongoing support?

Support is arranged per client. Tell us how your company works and what you need covered, and we will say what fits.

Talk through your workflow

Free 30-minute call. No sales pitch. We'll tell you honestly what we would do and whether we are the right fit.