Services

Identity & device management

Most break-ins start with a stolen password or an unmanaged laptop. We protect every sign-in with Microsoft Entra ID and keep every device secure and up to date with Intune.

What’s included

What we look after

  • Multi-factor sign-in

    Microsoft Entra ID with multi-factor authentication, so a stolen password alone isn’t enough to get in.

  • Conditional Access

    Rules that decide who can sign in, from which devices and where, available with the right Microsoft 365 plan.

  • Intune device management

    Laptops and phones kept encrypted, updated and protected, with company data separated from personal apps.

  • Zero-touch laptops

    With Windows Autopilot, new laptops can ship straight to the employee. They sign in with their work account and apps and settings install automatically.

  • Lost or stolen devices

    Company data can be wiped from a lost laptop or phone remotely, without waiting for it to turn up.

  • Accounts that match your team

    One account per person, with access added and removed in one place as people join, move or leave.

Common problems

Sounds familiar?

If any of these describe your office, it’s worth a conversation.

  • Some staff still sign in with only a password.
  • Laptops are set up by hand, one at a time, and no two are the same.
  • You couldn’t say for sure which devices are encrypted or patched.
  • Staff read work email on personal phones with no protection.
  • A lost laptop would mean a lost weekend of worry.

How it works

How we get you there

  1. Step 1: Check

    We review your sign-in security, accounts and devices, and check what your Microsoft 365 plan already includes.

  2. Step 2: Protect

    Multi-factor sign-in, Conditional Access and device policies rolled out in stages, with your staff guided through each change.

  3. Step 3: Keep it current

    Devices monitored and kept compliant, and new laptops ready for each new hire without manual setup.

Questions

Common questions

Do we need Microsoft 365 Business Premium for this?

Business Premium includes Intune and Entra ID P1, which covers device management and Conditional Access. Some features also work with other plans; we confirm what fits your team before you change anything.

Will multi-factor sign-in annoy my staff?

Set up well, it’s a quick tap in an app, and trusted devices are asked less often. We help each person set it up so nobody gets locked out.

Can staff use their own phones for work?

Yes. Intune can protect company apps and data on personal phones without managing the whole phone or seeing personal content.

More answers on our FAQ page.

Related services

Find out where your IT stands

A free IT assessment shows you what's working, what's at risk and what to fix first, explained in plain English.