An estate without an administrator soon shows it
Devices that have not restarted for weeks, encryption switched off on a laptop, antivirus up to date on some machines but not others: without regular follow-up, these gaps build up silently on an estate with no in-house IT administrator. Microsoft 365 and Intune make it possible to set a baseline level of compliance and keep it visible, remotely.
Configuration and set-up of your Microsoft 365 tenant.
Intune policies (device compliance, conditional access, application deployment).
Optional periodic review of estate compliance (updates, encryption, antivirus) through a dashboard.
Work outside the scope defined and priced separately, on a time and materials basis.
Who is it for?
SMEs with 5 to 50 workstations and no in-house IT administrator.
Organisations that have just moved to Windows 11 and want to set baseline compliance on their estate.
Businesses with remote staff who need central control of access.
Set-up pricing
The set-up price depends on the number of devices enrolled in Intune. The starting price shown above covers up to 25 devices; 26 to 75 devices are priced in a higher tier, and beyond 75 the price is on request.
Set-up is billed at its real value and does not depend on any commitment to the periodic reviews: you can stop the reviews at any time without calling the delivered configuration into question. The tenant, the policies and the documentation belong to you.
Optional periodic reviews
The periodic reviews are optional, with no minimum term, and stop on simple request. They are billed monthly, in tiers based on the number of devices reviewed; the tiers are listed on the quote. Deploying an additional business application is priced as an extra, and work outside the scope is billed on a time and materials basis.
The scope is deliberately narrower than full managed IT services: compliance checks and correction of gaps within the agreed scope, at times agreed with you, with no user support, no permanent monitoring and no on-call duty. That is why it costs noticeably less per device than a full managed service.
How it works
Set-up: Microsoft 365 tenant configuration, device enrolment in Intune.
Policies: compliance and security policies adapted to your context.
Roll-out: gradual enrolment of the estate, validated with a pilot group.
Reviews: periodic compliance checks and fixes within the agreed scope.
Reporting: a quarterly report on the state of the estate, with recommendations.
Microsoft 365 and Intune are administered from the cloud, so the whole service can be delivered remotely, wherever your offices are.
Deliverables
Microsoft 365 tenant and Intune configured and working.
Compliance and security policies applied to the estate.
A compliance dashboard.
Configuration documentation.
Quarterly reporting.
This service is also part of the Windows Modernisation package, with three months of periodic reviews included.
Further reading
Frequently asked questions
Is the review service continuous, 24/7? No. There is no 24/7 support and no on-call duty. The optional periodic reviews take place at agreed times, within the agreed scope; work outside that scope is defined and priced separately.
Does the set-up include support hours? No. The set-up price covers the configuration of the tenant and the Intune policies. The periodic reviews are a separate option, billed separately. Work outside the scope (access management, application deployment, policy changes) is defined and priced separately.
Do the periodic reviews guarantee permanent compliance? No. They detect and correct compliance gaps within the defined scope, but they are not permanent monitoring: they are no guarantee of continuous compliance, no general responsibility for the whole estate and no complete day-to-day management of the tenant.
What does device compliance cover exactly? The baseline security elements: system updates installed, BitLocker encryption enabled, antivirus up to date, lock screen configured. The exact policies are defined with you during set-up.
Do we need to be on Windows 11 first? No, but it is recommended: Intune also works on Windows 10, but it delivers the most once the estate is on Windows 11, especially for the latest security features.
Can you deploy our business applications through Intune? Yes, for most standard applications. Very specific applications are studied case by case and included in the set-up quote.
What about a major incident, a compromise or a heavy migration? These situations are not covered by the base service and are quoted separately. Microsoft's decisions, licences, outages and the limits of third-party services also remain outside our scope and control.