Credentials
Current and lapsed Microsoft certifications listed separately, with 15+ years of Microsoft desktop, endpoint and business IT work.
See credentials →Platforms
The platforms I work with.
I’m Ewan Milroy, and I run Ewan Me IT in Brisbane. Most of my work is in Microsoft 365: sign-ins, devices, email and files. I also support Google Workspace. Below is each platform I work with, what I actually do with it, and the page with more detail.
Microsoft 365 and identity
Microsoft 365 is where most of my work happens. I administer tenants as a delegated admin; you buy the subscriptions and own the tenant and the data.
Microsoft 365
Tenant settings documented, licences reconciled against real headcount, and starters and leavers handled the same way every time, including converting a leaver's mailbox to shared.
Microsoft 365 administration →Microsoft Entra ID
Staff, guests, shared mailboxes and service accounts separated. MFA enforced with an authenticator app, Conditional Access where licensing allows, and a documented break-glass admin account.
How I roll out MFA →Exchange Online
Shared mailboxes, distribution groups, aliases and mail flow rules, with anti-phishing, Safe Links, Safe Attachments and quarantine tuned rather than left on defaults.
Email in Microsoft 365 →Microsoft 365 Copilot
Copilot can read anything the person asking can open, so I find oversharing and narrow access before any Copilot licence is switched on.
Copilot readiness →
Devices and endpoint security
Laptops and phones are where a lost device or an unpatched hole turns into a real problem. These are the tools I use to keep them in check.
Microsoft Intune
Enrolment for Windows, macOS, iOS and Android, with Autopilot for new laptops. BitLocker and FileVault on with recovery keys kept in the tenant, update rings, compliance policies, and remote lock and wipe.
What Intune actually does →Microsoft Defender
Defender for Office 365 on email and Teams, and Defender for Business or Defender for Endpoint on laptops. I switch on what your licences already cover and triage the alerts myself.
Defender in Microsoft 365 →Windows 10 and Windows 11
Patching on a managed schedule, and Windows 10 end of life planning: which PCs can move to Windows 11 and which are due for replacement.
Windows 10 end of life →
Email and domains
Whether someone can send email as your business comes down to a few DNS records. I work on these for Microsoft 365 and Google Workspace domains alike.
SPF, DKIM and DMARC
All three published, then DMARC walked up to a reject policy without bouncing real mail, and checked for drift afterwards.
Free email spoofing test →BIMI
Once DMARC is at enforcement, BIMI can show your logo beside your emails in Gmail and Yahoo. The mark certificate is a separate annual cost from a third party.
Domain Lockdown →MTA-STS and SSL certificates
Checked from the outside alongside your email records, so you can see whether mail is delivered encrypted and whether your website certificate is in order.
Free security health check →Domains and DNS
DNS records and domain cutovers during migrations, and checking where a domain actually points before an old platform is cancelled.
A migration audit case study →
Google Workspace and migrations
Microsoft is my deeper specialty. Google Workspace support is real, mainly for email security, identity and migrations.
Google Workspace
Admin Console, Gmail, Groups and shared mailboxes, Drive and Shared Drive permissions, MFA and account security, licensing, and Google Vault where it is licensed.
Google Workspace support →Moving between platforms
Google Workspace to Microsoft 365, IMAP, on-premises Exchange, a file server or another tenant. Mailboxes, calendars, contacts and files are mapped before anything moves, with DNS timing and a rollback position planned.
Migrations →
Automation and AI
I build automation inside the tools a business already pays for, and I run the same kind of tooling in my own business.
Automation inside Microsoft 365
For one client, an automation running entirely inside their own Microsoft 365 fills compliance certificates from a spreadsheet, makes the PDFs and drafts the emails. A person still checks each one before it goes.
The paperwork case study →Spreadsheets and OpenStreetMap data
A pricing engine built on a client's own spreadsheet and free OpenStreetMap routing data, with road distances, billing rules and margins for every suburb.
The pricing case study →ChatGPT, Copilot and other AI assistants
Staff training on what is safe to paste into an AI assistant and how to get useful output from one. I also check whether assistants like ChatGPT can read and recommend a business's website.
AI and automation →n8n and MCP
The forms and free scans on this site run on my own n8n automation server. The scans are also published as an MCP server, so an AI agent such as Claude can run them directly.
The free tools →
Business apps
Some platforms I secure around rather than administer.
Xero and MYOB
I don't replace or administer your accounting software. I secure the layer underneath it: the email accounts that reset its logins, the devices staff use, and who can reach what.
IT for accounting firms →
How to check what I say
A list of platforms is easy to write. These are the places on this site where you can test it.
The Standard
The published baseline every managed client runs on, control by control, with a changelog.
Read the Standard →Case studies
Measured results from real client work, anonymised until clients approve naming.
Read the case studies →Free tools
Run the same outside-in email and website checks I use on your own domain. No login or access needed.
Try the free tools →Where my work stops
Knowing a platform is not the same as doing everything on it. These are either outside what I do or quoted separately, so nothing turns up on an invoice unannounced.
- I don't resell licences. You buy Microsoft 365 or Google Workspace yourself and own the tenant and the data.
- No custom SharePoint or Power Platform development.
- No 24/7 monitoring or on-call guarantee.
- Third-party backup products are quoted separately, never assumed.
- No hardware supply, cabling or electrical work.
For what managed clients get as standard, see managed IT and pricing.
Not sure your setup is on this list?
Book a free 15-minute chat. I will tell you straight whether it is something I work with.