What I Do

Your Microsoft 365 is probably not working as well as it should.

Most businesses are paying for Microsoft 365 but only using a fraction of what it can do. The rest is either misconfigured, switched off by default, or quietly creating security gaps nobody has noticed yet. I go in, find what is wrong, fix it, and make sure it stays fixed.

identity and access
The wrong people have access. Or the right people cannot get in.

Entra ID and Conditional Access

Access policies that let your staff work from anywhere while keeping everyone else out. Former employees lose access the moment they leave. MFA works without frustrating your team every time they open their laptop.

  • Conditional Access policy design and implementation
  • MFA enforcement and authentication strength policies
  • Privileged Identity Management and role assignments
  • External identities, guest access, and B2B collaboration
  • Break-glass account configuration and monitoring
endpoint management
You have no idea which devices are accessing your business data.

Intune Deployment and Management

Every device that touches your data gets enrolled, managed, and kept compliant automatically. Your staff do not need to do anything. You get full visibility into what is on your network and what is not.

  • Device compliance policies for Windows, iOS, Android, macOS
  • App protection policies for managed and unmanaged devices
  • Autopilot enrollment and zero-touch provisioning
  • Windows Update for Business rings and patch management
  • Defender for Endpoint integration and baseline policies
email and collaboration
Your emails land in spam. Or someone is impersonating your domain.

Exchange Online and Email Security

Properly configured email authentication so your messages reach inboxes and nobody can send emails pretending to be you. Anti-phishing policies that protect your staff from the attacks that actually work.

  • SPF, DKIM, DMARC configuration and verification
  • Anti-phishing, anti-spam, and safe links policies
  • Shared mailbox governance and licence optimization
  • Mailbox migration from on-premises Exchange
  • External forwarding controls and audit logging
endpoint security
Every Windows device shares the same local admin password. Nobody has changed it in years.

Windows LAPS

Windows LAPS automatically rotates the local administrator password on every device and stores it securely in Entra ID. If one machine gets compromised, it cannot be used to access the rest of your fleet.

  • LAPS policy deployment via Intune
  • Entra ID LAPS escrow configuration
  • Hybrid Entra registration troubleshooting
  • Account name compatibility across OS versions
  • Post-deployment escrow verification via Graph
automation
Admin tasks take hours. Reports are done manually. Things fall through the cracks.

PowerShell and Graph API Automation

Repetitive admin work replaced with scripts that run reliably and produce clear reports. Licence audits, mailbox reviews, user onboarding and offboarding, all automated so nothing gets missed and nothing takes longer than it should.

  • Microsoft Graph PowerShell automation scripts
  • Tenant health audit and reporting scripts
  • Mailbox storage and quota reporting
  • Bulk user and licence management
  • Scheduled automation via Azure Automation or Logic Apps
hybrid infrastructure
Your on-premises systems and Microsoft 365 are not talking to each other properly.

Hybrid Entra Environments

If your business still runs Active Directory on-premises alongside Microsoft 365, the connection between them needs to be configured correctly. When it is, your staff get one login that works everywhere. When it is not, you get sync errors, broken access, and devices that cannot enrol in Intune.

  • Entra Connect installation and configuration
  • Hybrid Entra join troubleshooting and remediation
  • Password hash sync and seamless SSO setup
  • Staged rollout planning for cloud-only migration
  • AD Connect health monitoring and alerting

What your business looks like after the work is done

Your staff sign in once and get access to everything they need. Devices are managed and compliant without anyone having to think about it. Former employees lose access the moment they leave. Your email reaches inboxes. Security policies run in the background. And when something needs attention, you hear about it before it becomes a problem.

That is what Microsoft 365 is supposed to deliver. Getting there does not require a full-time IT department. It requires the right configuration, done once, done properly.