Microsoft 365 health check, London
A Microsoft 365 health check is an independent review of how your tenant is set up: who can sign in and how, who holds admin rights, how email is protected, what is shared outside the business and which licences you pay for. We run the health check for organisations in London and across the UK, then hand you a prioritised list of fixes that is yours to keep.
The Microsoft 365 health check
Trusted by teams across UK government, healthcare, education, charities, financial services and global brands
Microsoft 365 tenants tend to grow by accident. Settings made in a hurry years ago stay in place, and new features arrive switched off. These are four areas we always look at.
Admin accounts
Admin rights were given out to get a job done and never taken back. Some admins use the same account for email and administration.
What we checkMicrosoft recommends separate accounts for admin work and two cloud-only emergency access accounts. We list every admin and recommend the least access each needs.
Sign-in
Some users, shared mailboxes or older apps sit outside the rules. Legacy authentication does not support multi-factor authentication, so it can be used to get round it.
What we checkWe map who is covered and who is not, and whether security defaults or Conditional Access suits your licences.
Licences
Plans such as Microsoft 365 Business Premium include Conditional Access and Defender features that many organisations never switch on.
What we checkWe compare your licences with your configuration, so you can see what you already own before you buy anything new.
Sharing
Anyone links, old guest accounts and broad SharePoint permissions build up over time, often unnoticed until a client asks.
What we checkWe review external sharing, guests and site permissions, and recommend settings that still let people work with clients.
Our advice comes from engineers who run these platforms every day. We can share evidence of each on request.
Jamf licences, and the team to run them
See our Jamf listing (opens the Jamf partner directory in a new tab)
Jamf run for you as a managed service
See our Jamf listing (opens the Jamf partner directory in a new tab)
Government Commercial Agency (GCA) supplier
See our G-Cloud listings (opens the Digital Marketplace in a new tab)
Microsoft Cloud Solution Provider (CSP)
Microsoft 365 licences in the UK, and the team to manage them
Microsoft Secure Score sits in the Microsoft Defender portal and measures how many of Microsoft’s recommended security actions your organisation has taken. It is a useful starting point, and it can show the score you could reach with the licences you already own.
Microsoft is clear about its limits. Secure Score is not a measure of how likely you are to be breached, and not every recommendation suits every organisation. A low-scoring setting may matter little to you, while a high-risk gap, such as a former employee who still has admin rights, may barely move the number.
The health check reads Secure Score alongside your own risks: the clients you serve, the data you hold and the way your people work. That is the difference between a dashboard and advice.
Four steps. The report is written for decision makers and engineers alike, so it is as useful to your board as to whoever makes the changes.
Agree what we review
A short call to understand your organisation, your licences and any concerns, such as a client questionnaire or a recent incident. We agree the scope and the cost before we start.
Book a health checkLook at the tenant
We review identity, admin roles, email protection, devices, sharing and licences with least-privilege access that you approve and can remove at any time.
Prioritise the fixes
You get a plain-English report with fixes ordered by impact and effort. We walk you through it, including which changes affect your people and which are invisible to them.
Fix it your way
Your team can make the changes, we can make them as a project, or we can manage the tenant for you day to day. The findings are yours whichever you choose.
Typical changes once the findings are acted on. Every tenant is different, so your report sets out what applies to you.
| Area | Before | After |
|---|---|---|
| Admin rights | BeforeSeveral everyday accounts with global admin. | AfterSeparate admin accounts, least-privilege roles and two emergency access accounts. |
| Sign-in | BeforeMulti-factor authentication for most users, with exceptions nobody remembers. | AfterConditional Access or security defaults covering every user, and legacy authentication blocked. |
| BeforeUnclear email authentication and phishing settings. | AfterSPF, DKIM and DMARC in place, with phishing and impersonation protection reviewed. | |
| Devices | BeforeAny device with a password can reach company data. | AfterOnly compliant devices reach company data, Mac and Windows alike. |
| Licences | BeforePaid-for security features switched off. | AfterThe features you own configured, before any new spend is considered. |
Our health check is written by engineers who manage Microsoft 365 for clients every day, so each recommendation comes with a realistic view of how it would be delivered and what your people would notice.
The health check often leads to larger work: moving identity to cloud-only Entra ID, restructuring SharePoint, setting up Purview sensitivity labels, or getting ready for Microsoft 365 Copilot. The client story below shows where that can lead.
For a wider view of your IT, see IT consultancy. To run Windows devices properly in Microsoft 365, see Microsoft Intune.
“They provide clear, layman-friendly explanations and only recommend what we truly need.”Matt DronfieldManaging Director, Debt Free Advice, the coalition Toynbee Hall leads
Can’t see your question? Call us on +44 20 7550 9103 or book a call.
A Microsoft 365 health check is an independent review of your tenant’s settings. We look at sign-in and multi-factor authentication, admin accounts, email protection, device compliance, external sharing and licences, then give you a prioritised list of fixes that you keep, whether or not you work with us afterwards.
We confirm the cost after a short call, once we know the size of your tenant and what you want reviewed. Ongoing management, if you want it, is priced from £25 per device per month, excluding VAT and licences.
Through Microsoft’s granular delegated admin privileges (GDAP). You approve only the roles we need, for a limited time, and you can remove access at any time.
No. The review looks at settings and reports. Nothing changes until you agree the fixes, and we tell you in advance which changes your people will notice, such as a new sign-in prompt.
No. Cyber Essentials is a certification with its own requirements, assessed through a certification body licensed by IASME. A health check is wider advice on your tenant. Many of the fixes help with Cyber Essentials, and we can prepare you for it. See Cyber Essentials.
Yes. We manage tenants day to day as part of managed IT, and we supply licences as a UK Microsoft Cloud Solution Provider. See Microsoft 365 licensing.
Start with a short call. We will agree what to review, confirm the cost and give you findings you can act on, with or without us.
London head office
Postremo IT Limited
Level 24, One Canada Square
Canary Wharf
London E14 5AB
+44 20 7550 9103
info@postremoit.com
Also in Dubai
Business Bay, Dubai
Your brief: