Services
Nine areas where I take real work off your IT team
I work on live production environments — from a dozen mailboxes to several thousand.
The scope follows the scale: a single deployment, a migration, running the whole
project, or ongoing operations.
Microsoft 365 & cloud
Designing and deploying a tenant from scratch, or cleaning up one you already have. Licensing, identity, policies, governance.
- Tenant, domain and licensing configuration
- Exchange Online, SharePoint, Teams, OneDrive
- Migrations to M365 and tenant-to-tenant
- Intune and device management
Exchange & email
Exchange on-premises, Exchange Online and hybrid setups. Migrations without data loss and without downtime for users.
- Migrations: IMAP, cutover, staged, hybrid
- Moving off Exchange on-prem to the cloud
- SPF, DKIM, DMARC and deliverability
- Transport rules, retention, signatures (CodeTwo)
Active Directory & Entra ID
Clean identity is the foundation for everything else. I design the structure, the sync and the access rules.
- AD domain design and clean-up
- Entra Connect / Cloud Sync, hybrid identity
- GPO, permissions, privileged accounts
- SSO, MFA, Conditional Access
Hybrid environments
Your server room and the cloud working as one coherent system — with controlled coexistence or a plan for gradually retiring on-prem.
- Exchange hybrid and hybrid identity
- Extending AD to Azure / Entra
- Server migrations to Azure (lift-and-shift)
- Networking: site-to-site VPN, DNS, coexistence
Security & XDR
Microsoft Defender XDR rollout: detection, incident correlation and response instead of scattered alerts nobody reads.
- Defender for Endpoint, Identity, Office 365
- Detection policies and incident response
- Tenant and workstation hardening (Secure Score)
- Phishing simulations and user awareness training
DLP & data protection
Control over what leaves the organisation and where it goes. Classification, labels, policies and reporting you can act on.
- Microsoft Purview: DLP and sensitivity labels
- Compliance: GDPR, NIS2
- Retention and archiving policies
- Insider risk and access auditing
SysOps & managed support
Ongoing care for your environment, or extra capacity for an in-house IT team that lacks cloud expertise or simply time.
- Windows server administration
- Monitoring, periodic reviews, automation
- Hardened backup (Veeam, immutable copies), DR / BCP
- Documentation and knowledge transfer
IT audit & consulting
An independent assessment of your environment and sensible recommendations — before purchasing and deployment decisions are made.
- Infrastructure, tenant and security audit
- Environment inventory and documentation
- Prioritised recommendations and a roadmap
- Advice on solution and licence selection
IT project management
Running deployments, migrations and modernisations from decision to sign-off — with a schedule, a budget, and someone who understands what the vendors are actually doing.
- Deployment plan, schedule and budget
- Migrations, modernisations, system integration
- Coordinating teams and vendors, risk management
- Technical oversight, rollback plans and acceptance