Managed Microsoft 365

Everything we manage in your Microsoft 365.

One accountable team across licensing, security, devices, backup and support. Here is what each covers, and where the boundaries sit.

OneOfZero management layer

Licences and tenant administration, by one accountable team

Identity and MFA: Secure & Recover + Managed Workplace
Email and collaboration: Secure & Recover + Managed Workplace
Managed devices: Managed Workplace
Backup and recovery: Secure & Recover + Managed Workplace
Support and service review: Scope varies by plan

Illustrative diagram, not a live view of any tenant. What is managed depends on your plan and is confirmed in writing.

Licensing and tenant administration

Your licences and tenant, looked after.

We administer your Microsoft 365 licences and tenant, so people changes and licence questions have one place to go.

Included in: Every plan

Licence administration and basic tenant setup
User onboarding and offboarding
Annual licence and tenant review
Standard Microsoft escalation assistance

View details

Licence optimisation, so assignments match what people actually use (Secure & Recover and Managed Workplace).
Escalation to Microsoft when an issue needs Microsoft.
Essentials includes limited user onboarding and offboarding; Secure & Recover and Managed Workplace include it in full.

Licence charges are separate from OneOfZero's management fee. Essentials works with Business Basic, Standard or Premium, depending on your agreed requirements. Secure & Recover and Managed Workplace require Business Premium. Licensing arrangements are confirmed in your written proposal.

Identity and email security

Safer sign-in and email, kept under management.

We manage sign-in controls and email protection for your tenant, then review them with you each quarter.

Included in: Secure & Recover and Managed Workplace

MFA and Conditional Access managed
Email protection and domain authentication
Administrator-role and external-sharing review
Quarterly service review

View details

The Resilience Onboarding Review starts this work: user and former-staff access, administrator roles, MFA and Conditional Access, email protection and domain authentication, and guest and external sharing.
Each finding is ranked Priority, Review or No immediate concern, with its supporting evidence and an owner decision.

Device management

Devices kept managed and up to date.

We manage devices through Intune and Defender. Managed Workplace adds monitoring, patch oversight and broader remote support.

Included in: Intune and Defender: Secure & Recover and Managed Workplace. The rest: Managed Workplace

Intune and Defender management
Device enrolment and agreed endpoint management
Endpoint monitoring and patch oversight
Broader fair-use remote IT support

View details

Intune and Defender management is part of Secure & Recover and Managed Workplace.
Device enrolment, endpoint monitoring, patch oversight, prioritised support within the service terms agreed in writing and a quarterly technology review are part of Managed Workplace.
Support is fair-use, not unlimited.

On-site work and hardware are separately scoped.

Backup and recovery

Microsoft 365 data backed up for recovery.

Important Microsoft 365 data is backed up, monitored and periodically restore-tested.

Included in: Secure & Recover and Managed Workplace

Exchange Online, OneDrive, SharePoint and Teams-related files
Automated backup monitoring
Restore assistance
Quarterly sample restore test

View details

Backed up: Exchange Online, OneDrive, SharePoint and Teams-related files, with automated backup monitoring.
Recoverable: Restore assistance when something is deleted, changed or lost, with recovery documentation.
Tested: A quarterly sample restore test, so recovery is checked rather than assumed.
Recovery documentation is part of the service.

What can be restored depends on what was backed up and when; no service can promise zero data loss, guaranteed recovery or protection against every ransomware incident.

Licensing

How licences work.

Essentials works with Business Basic, Standard or Premium, depending on your agreed requirements.
Secure & Recover and Managed Workplace require Business Premium.
Licence charges are separate from OneOfZero's management fee.
The Fit Call confirms which licence suits your business.

Resilience Onboarding Review

What the Resilience Onboarding Review looks like.

An example of the Microsoft 365 Resilience Onboarding Review included with Secure & Recover and Managed Workplace: a one-page summary with three status levels, an example finding with its evidence, an owner decision and a prioritised onboarding plan.

Illustrative example using synthetic information. Actual findings depend on your Microsoft 365 environment.

One-page executive summary

Each area carries one of three levels, so the owner sees what to look at first.

PriorityAddress first
ReviewConfirm, then decide
No immediate concernKeep under periodic check

User and former-staff access
Priority
An account that appears to belong to former staff is still enabled.
Administrator roles
Review
Administrator assignments to confirm with the owner.
MFA and Conditional Access
Review
MFA is registered for some accounts but not clearly required for all.
Email protection and domain authentication
No immediate concern
Domain authentication records are in place.
Guest and external sharing
Review
Guest accounts to confirm as still needed.
Licence optimisation
Review
Licence assignments to confirm with the business.
Backup readiness
Priority
No separate backup of Microsoft 365 data has been confirmed.

Example finding and evidence

A former-staff account appears to remain enabled

Priority

An enabled account can still be used to sign in if its credentials are known.

Supporting evidence

Account status: Enabled
Employment end date: Supplied by the owner
Last sign-in recorded: After the stated end date
Licence: Still assigned

Owner decision

Confirm whether this person has left and whether the account should stay.

Recommended next action

Once confirmed, handle mailbox and file ownership, disable sign-in, then review the licence.

Example prioritised onboarding plan

First
Priority items
Confirm and act on Priority findings, such as former-staff access, and start Microsoft 365 backup.
Next
Sign-in and roles
Confirm administrator assignments and where MFA should be required.
Then
Sharing and licences
Review guest and sharing settings and the licence changes you have confirmed.

Where to go next.

Find the plan that fits.

See what each plan includes, or book a free Fit Call and we will recommend one.

Book a Fit Call View managed plans