← Back

Managed IT support

The service we started with.

Remote helpdesk and onsite engineers, backed by full management of your Microsoft 365 tenant, Azure workloads, endpoints, telephony and hosting. One place to report a problem, whatever it turns out to be.

Send an inquiry

Helpdesk

First line for everything your staff run into: accounts and access, mail and Teams, printing, devices that will not behave, software that will not install. Most of it is handled remotely, without anyone leaving their desk.

Onsite support

When a problem needs hands — hardware, cabling, a server room, a new office fit-out or a staff onboarding day — an engineer comes to you. We are local, so being next door is not a figure of speech.

When something breaks, you reach someone who already knows how your environment is built. That is usually the difference between a fix in minutes and a site visit tomorrow.

How it works

Under management

01 — Stand it up

New office, new entity, or a first proper IT setup. We build the foundation before anything runs on it.

Internet and connectivity

We handle the line application with the provider, coordinate installation dates against your move-in, and make sure the circuit is live and tested before your first working day in the space.

Network and firewall

Firewall supply and configuration, switches, VLAN segmentation, cabling coordination and remote access. The network is designed once, properly, rather than grown by accident.

Wi-Fi coverage

Access points placed for the floor plate you actually have, with separate corporate and guest networks and authentication tied back to your directory.

Microsoft 365 tenant provisioning

A new tenant configured end to end: domain and DNS, mail flow, license selection, user accounts, SharePoint and Teams structure, and the security baseline switched on from day one rather than retrofitted later.

02 — Run it

Once you are up, we manage the six foundational elements of Zero Trust — identities, endpoints, data, applications, infrastructure and network.

Support desk

Freshservice is our support ticketing system. Every email to our support address is converted into a ticket, which is then attended to promptly by our helpdesk IT support agents.

Identities

Entra ID with single sign-on, MFA and Conditional Access, joiner-mover-leaver handling, privileged account control and license right-sizing.

Endpoints

Intune for enrollment, compliance policy, application deployment and Windows or OS patching, with NinjaOne covering third-party and non-Windows updates, monitoring, remote access and automation. On Business Basic or Standard plans, where Intune is not licensed, NinjaOne does both. Read: which patches what →

Device hardening

Beyond enrollment, we tighten the baseline: browser password managers disabled, inactivity timeout and screen lock enforced, automatic Windows and Office updates, BitLocker, local administrator control, USB and removable media policy, and firewall settings applied consistently to every device.

Data

Microsoft Purview for audit, retention, sensitivity labels, data classification, information protection, data loss prevention and insider risk management.

Applications

Microsoft 365 across Exchange, SharePoint, Teams and OneDrive: day-to-day administration, tenant migrations from other providers, and control over which third-party apps can reach your data.

Infrastructure

Azure cloud hosting and workload migration, virtual machines, on-premise and virtual servers, and keeping consumption from quietly climbing.

Network

Ongoing management of firewalls, switches and access points: firmware currency, rule review, VPN and remote access, and monitoring of the links your business depends on.

03 — Everything around it

The services most clients add once the core estate is stable.

Phone system

Teams calling deployed as your phone system: number provisioning, auto attendants, call queues and multi-level routing. We have built routing for multi-site organizations where a call has to reach the right floor and the right team, first time. More on Teams Phone →

Email signatures

Centrally managed signatures with CodeTwo: one consistent template across every user and device, including mobile, with campaign banners and disclaimers updated centrally rather than by asking staff to edit their own. We handle licensing and implementation.

Microsoft 365 governance

Syskit Point for visibility over SharePoint, Teams and OneDrive: who has access to what, external sharing, orphaned and sprawling workspaces, and scheduled access reviews sent to the owners rather than to IT. We handle licensing and implementation.

Server backup

Cloud and offsite backup for physical and virtual servers using Acronis Cyber Protect or NinjaOne Backup, with retention set against how far back you would actually need to go, and restores tested rather than assumed. Where a client is already on NinjaOne for RMM, keeping backup on the same platform means one dashboard and one alerting path rather than two.

Microsoft 365 backup

Microsoft 365 retains your data for a limited window and is not a backup. We run independent backup of Exchange, SharePoint, OneDrive and Teams with NinjaOne SaaS Backup, powered by Dropsuite, and we test the restores. Read: is Microsoft 365 backed up? →

Web hosting and security

Managed hosting on SiteGround, with the Sucuri web application firewall in front to filter traffic before it reaches your site.

Freshservice

What happens when you email support.

There is no portal to learn and no form to fill in. Your team emails the address they already have, and the system does the rest.

Someone emails support

Anyone on your team writes to our support address from wherever they are. No login, no ticket form, no training required.

Freshservice raises a ticket

Every email to support is converted into a ticket automatically, with its own reference. Nothing depends on one engineer noticing a message.

A helpdesk agent takes it

The ticket is attended to promptly by our helpdesk IT support agents. Replies thread back to the same conversation, so the history stays in one place.

It closes on the record

The fix is logged against the ticket. Over time that record is what turns a run of similar complaints into a root cause worth fixing properly.

Endpoint protection that follows your license.

There is no reason to pay twice for the same control. We look at what your Microsoft plan already includes, then decide what to add.

A Business Basic or Standard

We bring the endpoint security

These plans carry no advanced endpoint protection, so we secure the devices ourselves with SentinelOne Control or Bitdefender GravityZone, managed through NinjaOne alongside the rest of the estate.

B Premium, E3 or E5

We turn on what you already own

These plans bundle Defender for Endpoint, Defender for Cloud Apps, web protection and Conditional Access. Most of it ships switched off or half-configured. We deploy it properly and keep it tuned, at no extra license cost to you.