M365 Secure Workplace

Microsoft 365 setup and ongoing support

Built properly once. Kept secure and continuously improved.

We set up your Microsoft 365 environment to a defined standard and continually maintain its security and device configuration. This includes, among other services, monitored backups, two consulting reviews and one roadmap discussion per year.

Check eligibility

Run Microsoft 365 securely – even without an internal IT department.

For organisations that want to use Microsoft 365 securely and predictably. We reduce the workload of your existing IT team or lay the foundation for reliable operations even without an internal IT department.

We create a clearly defined Microsoft 365 environment and keep its security and device configuration continuously up to date. Predefined standards enable a structured, cost-effective implementation. Any necessary migrations are scoped separately based on your existing environment.

From eligibility check to a managed standard.

  1. 01

    Readiness check

    We assess user count, tenant state, device platform and prerequisites for the product standard.

  2. 02

    Confirm the standard

    The target model, responsibilities and required add-ons are clearly separated before implementation.

  3. 03

    Deploy efficiently

    Predefined configurations shorten the path to an operational and secure Microsoft 365 environment.

  4. 04

    Transition into service

    The configuration is verified, documented and transferred into the appropriate operating model.

The level of support you actually need.

Ongoing maintenance of security and device configuration, along with backup monitoring, is included in the product. User account management and licence assignments are available as an additional service. Together, we define which tasks remain with your team and which we take on.

Included in the product

Secure Workplace Lifecycle

The technical product standard remains secure, transparent and current.

  • Maintenance of standardised baselines, policies and platform configuration
  • Assessment of relevant changes across the Microsoft services in use
  • Routine adjustments to the defined product standard
  • Monitoring of Veeam Data Cloud backup jobs
  • Two consulting reviews and one roadmap conversation per year

Optional extension

Managed Administration

For businesses without internal IT, we can additionally handle clearly defined administrative tasks.

  • Creation, modification and deactivation of user accounts
  • Support for defined joiner and leaver processes
  • Assignment and removal of customer-provided Microsoft licences
  • Administrative Microsoft 365 requests within the agreed service scope

What M365 Secure Workplace covers.

One aligned model for identity, devices, communication, collaboration and data backup.

Identity & access

A central identity with binding and transparent access decisions.

  • Microsoft Entra ID
  • Passkey / multifactor authentication (MFA)
  • Conditional Access
  • Access only from compliant devices (Zero Trust)

Endpoint management

Standardised provisioning and management of workplace devices.

  • Microsoft Intune
  • Windows Autopilot
  • Device encryption
  • Windows Update for Business
  • MAM for corporate data on iOS and Android

Endpoint security

Integrated protection for managed workplace devices.

  • Microsoft Defender for Business
  • Microsoft Defender Antivirus
  • Attack surface reduction (ASR)
  • SmartScreen and web filtering

Email & communication

Coordinated protection and dependable communication with Microsoft 365.

  • Exchange Online
  • Defender for Office 365 Plan 1
  • Anti-spam and anti-phishing configuration
  • Safe Links and Safe Attachments

Data & collaboration

Clear storage locations and a standardised permission structure.

  • OneDrive for Business
  • SharePoint Online
  • Microsoft Teams
  • Standardised roles and permissions

Microsoft 365 backup

Additional, monitored data protection for the core Microsoft 365 services.

  • Veeam Data Cloud including licence provision
  • Protection for Exchange Online, OneDrive, SharePoint and Microsoft Teams
  • Monitoring of backup jobs

Standardisation & branding

A transparently documented environment that is recognisable as part of the company.

  • Documented product standard
  • Standardised tenant configuration
  • Logo and colour integration
  • Tenant branding within Microsoft-supported capabilities

Clear prerequisites. Clear boundaries.

Microsoft 365 Business Premium is the mandatory foundation for every user. As a rule, we provide the required Microsoft and Veeam Data Cloud licences directly through SZ Solutions; existing licensing arrangements are reviewed during the readiness check.

Prerequisites

  • Microsoft 365 Business Premium for every user
  • Windows 11 Pro or macOS as one consistent standard platform
  • Cloud-only without hybrid Active Directory structures

Not included in the standard

  • Migration of existing devices, data or bespoke legacy configurations
  • End-user helpdesk and general incident handling
  • Incident response and 24×7 availability
  • Bespoke projects outside the documented product standard
  • General third-party patch management

Add-ons for the actual transition.

These modules are offered separately to match the starting point, without forcing them into the standard product.

Device & on-site migration

Existing devices are moved into Entra ID and Intune on site.

Data migration

Data from file servers or legacy systems is moved into SharePoint and OneDrive with a clear structure.

Email signatures

Design and technical delivery of consistent company-wide signatures.

Printer integration

Integration of local printers outside a standardised Universal Print scenario.

Mixed Windows/macOS estate

Extension of the standard to operate both desktop platforms in parallel.

Mobile MDM

Full device management for iOS/iPadOS or Android in addition to the included MAM controls.

Teams telephony

Design and implementation of Microsoft Teams Phone as a separate project.

Related consulting services.

For environments outside the product standard or additional technical depth.

Identity & Access Security

Entra Tenant Security

Our Microsoft Entra ID consulting helps secure business identities and access. We assess your tenant and implement MFA, passkeys and Conditional Access through an agreed rollout plan.

Details & enquiry
Modern Endpoint Management

Intune Endpoint Management

Our Microsoft Intune consulting helps you introduce central device management or improve an existing environment. We structure enrolment, applications and policies for Windows, Apple and Android.

Details & enquiry
Endpoint Security

Microsoft Defender

Our Microsoft Defender consulting aligns endpoint protection with your operational needs. We review the configuration and introduce ASR rules, SmartScreen, Network Protection and web filtering in controlled stages.

Details & enquiry

Working with us

Is M365 Secure Workplace suitable for existing environments?

The readiness check establishes whether your tenant and devices fit the cloud-only standard. Device or data migration and other transition work are scoped as separate add-ons after the assessment.

Who handles operations after deployment?

We agree on which duties remain with your team and which SZ Solutions takes on. Secure Workplace Lifecycle covers ongoing maintenance and development of the standard; Managed Administration adds the agreed administrative tasks.

Direct contact

Interested?

Just give us a call. We will discuss your project personally, directly and without obligation.

Call us directly

0173 9653255

Reach us personally for an initial assessment of your project.

Prefer to write?

Send us an email

Information about how we process your details is available in our privacy notice.