Ewan Me IT

Microsoft 365

Microsoft 365 support in Brisbane, from the person who opens the admin centre.

Licensing, Entra ID, Intune, Exchange Online, SharePoint, Teams and Defender, configured properly and kept that way. No ticket queue between you and the fix.

Set up once, in a hurry, never looked at again.

Email works, so nobody looks underneath. Underneath there are usually licences billing for staff who left, sharing links sent outside the business years ago, and laptops nobody can wipe. None of it surfaces until it costs money.

Looking for Office 365 support?

Same thing. Microsoft renamed the business plans from Office 365 to Microsoft 365 in 2020 and plenty of people never changed the habit. Same tenant, same admin centre.

Fix these first

  1. Sign-in security

    MFA on every account, and admin rights off the account that reads email.

    Security hardening →
  2. Unmanaged devices

    Company data on laptops you cannot patch, encrypt or wipe.

    What Intune does →
  3. Copilot before permissions

    Copilot in a drifted tenant surfaces what people were never meant to read.

    Copilot readiness →

Microsoft 365 management

The outcome first, the detail underneath.

Tenant and licensing

Stop paying for licences nobody uses.

Licences still billing for staff who resigned, two plans doing the same job, everyone on the top tier by default.
  • Tenant audit: domains, admin centre settings and tenant-wide policies documented.
  • Licences reconciled against real headcount, with unassigned and duplicated subscriptions removed.
  • Right-sized per role: Business Basic, Standard and Premium mixed, not one plan for everyone.
  • You buy the subscriptions and own the tenant. I administer it as a delegated admin.

Identity

Only your people sign in, and only from somewhere sensible.

Nearly every real attack on a small business starts with a working password. Identity gets fixed first.
  • Entra ID tidied so staff, guests, shared mailboxes and service accounts are separated.
  • MFA enforced for everyone, using an authenticator app with number matching, not SMS codes.
  • Conditional Access for legacy authentication, risky sign-ins and unmanaged devices where licensing allows; security defaults where it does not.
  • Admin separation, plus a documented break-glass account excluded from the policies that could lock everyone out.

Devices

A stolen laptop should be an inconvenience, not a breach.

Intune enrols the laptops and phones your team uses, proves they are encrypted and patched, and lets you wipe one remotely. What Intune actually does.
  • Enrolment for Windows, macOS, iOS and Android, with Autopilot for new laptops.
  • BitLocker and FileVault on, with recovery keys escrowed in the tenant.
  • Update rings, so patches hit a test group before the whole business.
  • Compliance policies tied to Conditional Access, plus remote lock and selective wipe.

Email

Your mail arrives, and nobody else can send as you.

Exchange Online handles delivery. Whether a scammer can post a fake invoice from your domain comes down to three DNS records.
  • SPF, DKIM and DMARC published, then walked up to a reject policy without breaking real senders.
  • Anti-phishing, impersonation protection, Safe Links and Safe Attachments tuned, not left on defaults.
  • Mail flow rules, shared mailboxes, distribution groups, aliases and external-sender warnings.
  • Quarantine reviewed, so genuine mail is not quietly vanishing.

Files and collaboration

Files people can find, shared only with the people you meant.

A SharePoint site per department, a OneDrive per person, and nobody sure which links went outside the business.
  • SharePoint sites and libraries built around how the business works, not the default template.
  • Permissions rebuilt on groups, so access follows the role when someone changes jobs.
  • External sharing set per site: anyone-links off by default, expiry dates on the rest.
  • Teams sorted, and OneDrive Known Folder Move so Desktop and Documents sit in the tenant.

Microsoft Defender

Most tenants pay for more Defender than they switch on.

Defender is several products wearing one name. Your existing licences usually cover more than is switched on.
  • Defender for Office 365 on email and Teams, with impersonation policies set for your real executives.
  • Defender for Business or Defender for Endpoint on laptops, with alerts that reach a human.
  • Secure Score reviewed, separating changes worth making from ones that move a number.
  • Alerts triaged by me, and explained in plain English when one matters.

Backup

Microsoft 365 is not backing itself up.

This is the one that catches people out. Retention policies, the recycle bin, version history and OneDrive sync are not a backup. They will not rescue you from a deletion noticed three months later.
  • An honest read of what your setup would actually recover, and from when.
  • Whether an independent backup of mail, SharePoint, OneDrive and Teams is worth the money.
  • Retention and litigation hold configured where licensing includes them, and called retention, not backup.
  • Choosing and running a third-party backup product is quoted separately, never assumed.

Onboarding and offboarding

Starters working on day one. Leavers closed the same hour.

Offboarding is the half most small businesses get wrong. An account still live after someone leaves is an open door.
  • A documented starter build: licence, groups, mailbox, device and apps, the same way every time.
  • Leavers: sign-in blocked, sessions revoked, MFA methods removed, licence reclaimed.
  • Mailbox converted to shared, so the address keeps working without paying for a seat.
  • OneDrive contents handed to the manager before the account is deleted.

Copilot readiness

Copilot is only as safe as your permissions were yesterday.

Copilot reads everything the person asking can already open. Where sharing has drifted for years, that is how the payroll spreadsheet turns up in a summary. Copilot Ready plan, from $890 + GST.
  • Oversharing found first: anyone-links, company-wide access, files nobody realised were open.
  • Sensitive content located and access narrowed before a single Copilot licence is enabled.
  • Advice on how many seats you actually need before you buy them.
  • A rollout with a walkthrough, so it gets used for real work.

Migration

Moving in, moving between tenants, or moving on.

Mail and files can move without losing a weekend, but only when the scope is understood before anyone touches DNS. See migrations.
  • Google Workspace, IMAP, on-premises Exchange, a file server, or another tenant.
  • Mailboxes, calendars, contacts and file shares mapped before anything moves.
  • A cutover plan with DNS timing, a rollback position, and staff told what changes.
  • Priced after a scoping call: volumes vary too much for an honest fixed number.

What is not in the price

Quoted separately

  • Migrations, tenant redesigns and bulk device rollouts.
  • Problems that existed before I arrived.
  • Third-party backup products, subscription and setup.
  • Microsoft licences and Copilot seats, billed at cost.
  • After-hours and urgent work, at the published urgent rates.
  • Line-of-business apps and vendor liaison.

Not included at all

  • 24/7 monitoring or an on-call guarantee.
  • Reselling your licences. You buy them and own the tenant and the data.
  • Custom SharePoint or Power Platform development.
  • Hardware supply, cabling and electrical work.

Service hours are Monday to Friday, 8:00am to 5:00pm Brisbane time, excluding Queensland public holidays.

How to buy it

Microsoft 365 Security Hardening

One-off

from $690 + GST

Microsoft 365 Security Hardening, from $690 + GST (Typically half a day · fixed scope). MFA and Conditional Access configured, risky sharing and stale access cleaned up.

See the full scope →

Managed IT

Ongoing

$89 per user / month + GST

Microsoft 365 administration, Entra ID and MFA, and Intune device management are part of every managed IT plan, from Business+ at $89 per user / month + GST. No lock-in.

Compare plans and pricing →

Every managed tenant runs to the same published baseline: identity, devices, email, data and people, control by control. Read the Standard →

Experience

Microsoft-certified IT professional with more than 15 years of hands-on business IT experience across Microsoft 365, endpoint management, cybersecurity and modern workplace technologies.

Google Workspace

Google Workspace support without another admin problem to manage.

From Gmail and user accounts to security, licensing and Shared Drive permissions, I keep Google Workspace organised, protected and working properly, so you can get on with running the business. Microsoft is the deeper specialty here; Google Workspace support is real, mainly for email security, identity and migrations.

Experienced in administering and supporting both Microsoft 365 and Google Workspace environments.

What I look after in Google Workspace

  • Admin Console management
  • Gmail configuration
  • User onboarding and offboarding
  • Groups and shared mailboxes
  • Google Drive and Shared Drive permissions
  • MFA and account security
  • Email authentication
  • Domain and DNS management
  • Licensing management
  • Retention and Google Vault, where licensed
  • Backup strategy
  • Ongoing support
  • Microsoft 365 migrations
  • Security health checks

Migrations

Move platforms without the horror stories.

Migrations go wrong when nobody plans the cutover. I map your mailboxes, files and users first, pick the right approach, and move you across with communications and training so the business keeps working.

Every migration is different, so I scope yours properly before quoting rather than publishing a fixed price that would not fit. It starts with a quoted migration assessment. Tell me what you are moving.

What a migration covers

  • Google Workspace to Microsoft 365
  • Microsoft 365 to Google Workspace, where supported
  • Email migration
  • Calendar and contacts
  • Google Drive to OneDrive or SharePoint
  • Domain and DNS cutover
  • User communications
  • Training
  • Post-migration support

Get your Microsoft 365 sorted.

Book a free 15-minute chat and I will tell you what is worth fixing first. Rather talk now? Call 0491 054 503, Monday to Friday, 8am to 5pm. Or send a quick enquiry instead.

Calendar not showing? Open the booking page.

Rather not pick a time? Send a quick enquiry

Tell me a little about your business and what you need. I’ll reply by email or phone within 2 business hours (Monday to Friday, 8am to 5pm), with a straight answer on what it would cost.

Not ready to talk yet? Take the free IT Health Check: 11 plain-English questions, a few minutes, and your results on screen before I ask for anything.

Call EwanBook a free chat