← All services

Services

Microsoft 365 setup, migration and security

Almost every small business we meet is already on Microsoft 365, and almost none of them are using it as configured — because it arrived through whoever registered the domain, with defaults nobody revisited.

The gap is rarely the software. It is that the security settings Microsoft ships switched off stay switched off, licences are paid for at a tier nobody chose, and the email authentication records that decide whether your mail lands in the inbox were never published.

Email authentication, which is where most of the damage is

SPF, DKIM and DMARC are three DNS records that together tell the rest of the internet which servers may send mail as your business. Without them anyone can send email that appears to come from your domain, and your genuine mail is likelier to be filtered as spam.

Most small-business domains have a partial SPF record and nothing else. Getting all three right is a couple of hours of work, it costs nothing to run, and it is the single highest-value thing most businesses can do to their email. We have done exactly this on domains resold through GoDaddy, where the admin portals actively hide the settings.

  • SPF that lists every service genuinely sending as you
  • DKIM signing on your own domain, not the provider default
  • DMARC, started at monitoring so nothing legitimate is lost
  • Reports read for a fortnight before the policy is tightened

Migration without the weekend everybody dreads

Moving mail from an old host, from a previous provider, or from a personal Gmail that a business quietly grew out of. The work is mostly sequencing: mail flows to the new place before the old one is switched off, and the cutover window lands when nobody is trying to work.

Files and shared mailboxes move too, and the part people forget is the shared calendar nobody owns until it disappears.

Licensing you actually chose

Microsoft has a lot of tiers and they are not designed to be easy to compare. Businesses routinely pay for Business Premium across the whole company when several people need nothing above Business Basic, or the reverse — everyone on Basic while the person handling finance has no advanced protection at all.

We will tell you which tier each role needs. Licences are bought in your name so they remain yours.

Common questions

  • Our email sometimes lands in customers' spam. Is that fixable?

    Usually, and usually it is authentication rather than content. If SPF, DKIM and DMARC are missing or wrong, filters have no way to distinguish your mail from someone forging it, so borderline messages get treated as suspicious. Fixing the records is the first thing to try and it is cheap.

  • Can you work with our existing Microsoft partner or reseller?

    Yes, and often the licences stay exactly where they are. Tenant-level changes can be made through Exchange Online PowerShell even when a reseller's dashboard will not show them, so a reseller arrangement does not have to block getting the configuration right.

No obligation

Talk it through first

Tell us what's happening and we'll give you an honest read on what it needs — including if that turns out to be nothing. We work across Middlesex, Somerset, and Mercer County.

Other services