Cloud & Hosting · Durham Region
Microsoft 365 set up so it's actually secure
Microsoft 365 is straightforward to buy and easy to configure badly. The default tenant has no MFA enforced, no backup, and mail authentication that lets anyone spoof your domain.
At a glance
- Migration from any mail platform
- MFA enforced, not just available
- DMARC, SPF and DKIM configured
- Third-party 365 backup
Microsoft doesn't back up your mailbox
This surprises most people. Microsoft guarantees the service, not your data. Deleted items are recoverable for a limited retention window and then they're gone — which does not cover a mailbox wiped by a compromised account, or a departed employee's data deleted a year ago.
Proper third-party backup of 365 is inexpensive and is the difference between an inconvenience and a permanent loss.
Email authentication is not optional
Without SPF, DKIM and DMARC configured correctly, anyone can send mail that appears to come from your domain. That's how invoice fraud against your customers works, and it damages your deliverability at the same time.
We configure all three and monitor the reports, moving to enforcement once legitimate senders are confirmed.
Licensing you actually need
Businesses routinely pay for licence tiers they don't use, and pay for leavers for months. We review assignment against actual use and tell you where to cut — even though the licence isn't where we make our money.
What's included
What you get
- Tenant setup or takeover — New tenant, or a proper audit and clean-up of an existing one.
- Mailbox migration — From Google Workspace, on-premise Exchange, IMAP or another tenant.
- MFA enforcement — Applied to every account, with sensible exceptions handled properly.
- Email authentication — SPF, DKIM and DMARC configured and monitored to enforcement.
- Third-party backup — Mail, OneDrive, SharePoint and Teams backed up independently.
- SharePoint & Teams — Structured so people can find things, with permissions that make sense.
How it runs
The process, start to finish
Every job follows the same shape, so you always know where you are in it.
Assessment
Current mail platform, data volumes, licences and users reviewed.
Plan
Migration approach and cut-over window agreed around your business.
Prepare
Tenant configured, domains verified, security baseline applied.
Migrate
Mail, calendars, contacts and files moved with users still working.
Cut over
MX records switched, delivery verified, stragglers synced.
Secure & support
MFA, DMARC and backup confirmed. Ongoing support in place.
Want this scoped for your site?
Tell us the building and what you're trying to achieve. We'll tell you what it takes — and whether you actually need it.
Common questions
Before you call
Isn't Microsoft 365 backed up already?
No — and this catches people out. Microsoft protects the service, not your data. Retention windows are limited and won't save you from a compromised account or a deletion discovered months later.
Can you migrate us from Google Workspace?
Yes. Mail, calendars, contacts and Drive files, migrated with users still working throughout, then a short cut-over window.
Will staff lose access during migration?
No. Data is synced ahead of the switch, so the cut-over is brief and mail continues to flow. We schedule it outside your busiest period.
Can you tell us if we're over-licensed?
Yes, and we frequently find businesses paying for higher tiers than they use and for accounts belonging to people who left. Licences aren't where we make our money, so the advice is straight.
Related