Home › Azure services
Azure and Microsoft 365
Tenant builds, migrations, device management, and the security settings most small firms never got round to switching on. Scoped and priced before anything starts.
The usual starting point
A lot of businesses are already paying for Microsoft 365 and using about a fifth of it. MFA is off. Staff sign in from personal laptops nobody's ever seen. The only backup is whatever OneDrive happened to sync.
That's usually what we walk into, and it's a few weeks of work rather than a few months. Everything gets done as a fixed piece with a plan and a price up front, and a written handover at the end.
- Scoping call
- Free, about 45 minutes
- Typical size
- 5–100 users
- Licensing
- You buy it direct We advise, the contract stays yours
- Admin access
- Named accounts you control
- Handover
- Written runbook, plus a fortnight of aftercare
- Support
- From £22 per user a month
What we take on
Moving to the cloud
- Tenant setup and domain verification
- Email migration from Exchange, IMAP or Google
- File server into SharePoint and OneDrive
- Retiring an ageing on-prem server
- Teams rollout, numbers and call flows
Identity
- Entra ID tidy-up: stale accounts, shared logins, wasted licences
- MFA rolled out without a helpdesk pile-up
- Conditional Access, report-only first
- Privileged and break-glass accounts
- Self-service password reset
Devices
- Intune for Windows, Intune or JAMF for Macs
- Autopilot, so a new laptop builds itself
- Compliance policies, BitLocker and FileVault key escrow
- App packaging, including line-of-business apps
- Update rings that don't break Monday morning
Keeping it up
- Azure Backup and retention
- Azure Virtual Desktop for remote staff
- Defender for Office and Endpoint, configured properly
- Cost reviews: right-sizing, reservations, dead licences
- Monthly reporting in plain English
Projects and prices
Guide figures for a firm of around 25 users. Firm quote follows the scoping call.
| Project | Time | From |
|---|---|---|
| Tenant health and security reviewReport with a prioritised fix list | 3–5 days | £595 |
| Microsoft 365 migration, up to 25 usersEmail, files, Teams | 2–3 weeks | £1,200 |
| MFA and Conditional Access rollout | 1–2 weeks | £695 |
| Intune enrolment and baseline policies | 1–2 weeks | £895 |
| Autopilot build and app packaging | 1–2 weeks | £795 |
| Backup and recovery setupIncludes a documented restore test | 1 week | £550 |
| Azure Virtual Desktop pilot | 2–4 weeks | £1,650 |
| Server decommission and cloud move | 3–6 weeks | On quote |
| Managed supportPer user per month, five user minimum | Monthly | £22 |
Microsoft licensing and Azure consumption aren't included. You buy those directly so the subscription stays in your name.
How the work runs
Scope
A call and a look at the tenant. You get a plan setting out what changes, what it costs and what could go wrong.
Pilot
Policies go in report-only, one department migrates first, and nothing touches everyone until it's proven.
Roll out
Staged by group, usually outside working hours, with the rollback written down beforehand.
Hand over
A runbook covering how it's built and how to change it, then two weeks of aftercare.
The tenant stays yours. We work through admin accounts you own and can revoke. There's no exit fee and nothing built so that only we can run it.
Start with a free scoping call
Forty-five minutes on the phone and a look at your tenant is usually enough to tell you what needs doing and roughly what it'll cost.
Common questions
How long does a Microsoft 365 migration take?
For a business up to 25 users, two to three weeks from the scoping call to everyone working from the new tenant, staged so nothing changes for everyone at once.
Do I need to buy my own Microsoft licences?
Yes. You buy Microsoft 365 and Azure directly from Microsoft or a reseller of your choice, so the subscription and the billing relationship stay in your name. We advise on which tier fits, but never sit between you and the licence.
Can you manage a tenant we already have, not just migrate one?
Yes. A lot of the work we do is tidying up and securing an existing Microsoft 365 setup — switching on MFA properly, enrolling devices into Intune, fixing backup gaps — without a full migration.
What happens to admin access when the project ends?
Nothing changes hands you don't control. We work through named admin accounts you own and can revoke at any point, and you get a written runbook covering how everything is built.