The short answer
Microsoft 365 support covers setting up your tenant, migrating mail and files, configuring the security settings that don't come switched on, and right sizing licences so you stop paying for features nobody opens. We run it for Australian businesses from Brisbane and respond in 1 to 3 hours.
What we look after
Tenant setup.
Domain verified, mail records pointed correctly, mailboxes created, devices signed in.
Migrations.
From Google Workspace, an old IMAP host, or a mess of personal accounts, with mail, calendars and contacts brought across.
Security configuration.
Multi factor authentication, sign in policies, forwarding restrictions and audit logging.
Licence reviews.
A plain list of who's on what, what's unused, and what you can stop paying for.
SharePoint and OneDrive.
File structure and permissions set so leaving staff don't take documents with them.
Backup.
Third party backup of mail and files, because Microsoft's retention is not a backup. See cloud storage and backup.
Day to day help.
New starters, departures, password resets, mail flow problems, quarantined messages.
The Microsoft 365 settings almost nobody turns on
Most small business tenants we're handed were set up by whoever was closest to the router. Mail works, so nobody looks again.
Multi factor authentication, first and by a distance.
The highest value change available to a small business, and it costs nothing. Passwords get reused, leak in other companies' breaches, and phishing pages copying the Microsoft sign in screen fool sensible people. MFA stops a working password being enough. Roll it out to every account including the owner's, because that's the mailbox with the banking in it.
Then check what's undoing it.
Older mail protocols authenticate with a password alone. Microsoft has retired basic authentication for most of them in Exchange Online, but SMTP authentication gets switched back on so a scanner or an old accounting package can send mail, and on that mailbox the second factor no longer sits in the way. Find out which accounts have it on, and why.
Mailbox rules are how you learn you're already compromised.
The first move after a takeover is rarely dramatic. The attacker adds an inbox rule so anything containing "invoice" or "remittance" is forwarded outside and filed where nobody looks. Then a supplier's bank details change in an email that reads perfectly, because it's threaded onto a genuine exchange. Audit every mailbox for rules nobody created, block automatic external forwarding, and turn auditing on.
Shared mailboxes versus paid licences.
This one is money. Addresses like info@ and accounts@ rarely need a full user licence. A shared mailbox is one that several licensed staff open from their own account, and it carries no subscription. Departed staff are the same trap: convert the account to a shared mailbox, keep the history, stop the billing.
Right size the rest.
Most businesses are on the wrong tier in both directions. Staff who only use webmail don't need installed desktop applications, while the people handling money sit on the cheapest plan when the higher business tier carries the device management and threat protection that would actually cut their risk. Usually it's the same money, spent on the licences that matter. We run Google Workspace too and we'll say which suits you.
How we take it on
We audit the tenant
Every account, every licence, every forwarding rule, MFA coverage and which protocols are open.
We give you the findings
A short document. What's exposed, what's being wasted, what we'd do first.
We fix it in order
MFA and legacy protocols first, then rules and permissions, then licences. Staff hear about changes before they happen.
We support it
Starters, leavers and mail flow, answered in 1 to 3 hours through managed support.
Who this suits, and who it doesn't
It works for businesses running mail on Microsoft 365 with nobody owning it internally, offices moving off an old mail host, and anyone who has had an account compromised.
It's a poor fit if you need on site IT for a large staffed network, or you already have an internal team doing this well.
Why hand this over
Australian support with a name on it.
Your account manager, not a global support queue and not a callback window that lands at 2am.
We respond in 1 to 3 hours.
Mail problems stop work completely. Everyone stands around until it's fixed, which is why the number matters here more than anywhere.
One supplier for mail, domain and hosting.
The DNS carrying your mail is the DNS carrying your site. Split that across suppliers and every issue starts with an argument about whose fault it is.
"We've never had a problem, so why change?"
Nobody has a problem until the invoice fraud, and by then the rule has been forwarding mail for six weeks. The audit takes an afternoon and changes nothing about how staff work.