Three Microsoft deadlines you can't miss.
Microsoft is making big changes in 2026. Each one breaks something if you do not get ahead of it.
2026
All admin actions in Entra, M365 Admin, Exchange Admin, Sentinel and Intune require phishing-resistant MFA. Existing app passwords and basic-auth admin sessions stop working. We move you to authenticator-app + number-matching ahead of the deadline.
2026
Most M365 SKUs are increasing. Some annual prepay options are being retired. We audit your licences before the rise so you don't pay for what you don't use, and lock in the right SKU mix.
2026
Scanners, alarms, line-of-business apps and older CRMs that send email through your M365 tenant with username + password will stop sending. We audit your tenant for SMTP Basic Auth usage and migrate to OAuth2 or Direct Send with a high-throughput connector before cutover.
What proper Microsoft 365 management looks like.
Most tenants we audit have 5-10 things wrong. Here is what we fix and keep fixed.
Tenant audit + licence rationalisation
We audit every M365 tenant we take over. Typical findings: ex-staff still licensed, MFA gaps, OAuth grants nobody remembers, public sharing turned on by default, no Conditional Access. We fix it all in week 1.
Microsoft Defender for Business
Endpoint detection and response across every device. Threat analytics, attack-surface reduction rules, web protection, automated investigation. Defender Plan 2 on Enterprise tier adds Threat & Vulnerability Management.
Entra ID Conditional Access + MFA
Phishing-resistant authenticator app with number matching, blocked legacy auth, geo-blocking, device compliance enforcement. Mandatory MFA Phase 2 ready ahead of 1 July 2026.
Microsoft 365 backup (third-party)
15-year retention. Outlook, OneDrive, SharePoint, Teams. Immutable, ransomware-resistant copies. Quarterly tested restores. Microsoft does not back up your data — that's your problem unless we are managing it.
Copilot governance
Microsoft Purview labelling for sensitive content, SharePoint and OneDrive permission cleanup, conditional access policies for Copilot, pilot-then-scale rollout. Copilot leaks whatever your tenant lets it see — we tighten the tenant first.
Teams telephony
Teams Phone Direct Routing via tier-1 AU carriers, number porting (keep your existing 02 numbers), call queues, IVR, AI call transcription. The cleanest way to retire an old PBX.
Migrations done right
Google Workspace → M365, on-premise Exchange → M365, M365 tenant → M365 tenant, mail-only → full M365. Zero email loss, zero downtime, permissions preserved. Typical 3-4 week project for 20-50 staff.
Pricing pass-through
We pass through your Microsoft licences at Microsoft's stated price. No markup, no surprise increases. Our managed service fee is separate and published — $149 / $199 / $299 per user / month.
Pricing — published, not negotiated.
Per user per month, AUD, ex GST. M365 licences passed through at Microsoft's stated price.
For smaller teams getting Microsoft 365 properly managed for the first time.
- Australian helpdesk
- 24/7 monitoring
- Tenant audit + licence cleanup
- MFA enforcement
- Email security
- Quarterly review
For 20-50 staff businesses that need M365 done right.
- Everything in Essential
- Microsoft Defender for Business
- Microsoft 365 backup (15 yr)
- Conditional Access + MFA
- Security awareness training
- Monthly review
For compliance-driven businesses (legal, medical, accounting, real estate).
- Everything in Professional
- Defender for Endpoint Plan 2
- Microsoft Purview labelling
- Copilot governance
- Privacy Act + AML/CTF support
- Dedicated account manager
Microsoft licences passed through at MSRP. No setup fees on 12-month agreements.