Co-Managed IT
ALCON DTS extends an internal IT team so the tenant, endpoints, and email stay operated without taking the helpdesk away from the people who already know the business.
For organizations that already have IT staff
Co-Managed IT from ALCON DTS is for Austin and Central Texas organizations that already have IT staff — manufacturers, professional firms, hi-tech companies, clinics, and other SMBs — and need a second bench for tenant and security work one generalist should not own alone.
You keep the relationships and context your internal team already has. We add operator depth on Microsoft 365, devices, email, and monitoring — written down, not guessed.
If you do not have internal IT and need ALCON DTS as the primary IT function, see Managed IT Services and the published Remote, Complete, and Secure IT packages.
How work is split
We agree scope in the review — who owns what, who backs whom up. Every client’s split is different.
What your internal team typically keeps
Day-to-day staff relationships, line-of-business applications they already own, and the on-site presence they already provide — the work that depends on knowing how this business actually runs.
What we typically take or share
Microsoft 365 tenant hygiene, monitoring, endpoint standards, email authentication, backup and restore discipline, and security or compliance operations when those programs are in scope — so your team is not carrying that load alone.
We use the review to agree who owns what, who backs whom up, and how tickets move between teams. Every client’s split is different. The point is a clear working agreement — not a single template.
What ALCON DTS runs beside your team
We run the Microsoft 365 tenant, device, and email work you want beside your internal team — not instead of them. Your people stay the face of support for the staff relationships they already own. We add operator depth on the surfaces one generalist should not carry alone.
Typical work we take or share: monitoring and the ticket types you assign to us; tenant hygiene (users and licenses, groups, sharing defaults, mailbox settings); identity in Entra; device standards for updates, protection, and encryption; inbound filtering and mailbox authentication.
What changed, who approved it, and how to reverse it stays documented enough that either bench can pick up the work.
On-site usually stays with your team when that is how you already cover the office. We work on site when we have agreed it. The written split matches how you operate.
We will look at how support works today and tell you whether co-managed is the right model, or whether a published managed IT package is.
Monitoring and shared ticket flow
We monitor the managed environment and works agreed ticket types to close. Your team stays the face of support for the staff relationships they already own. How escalations move between benches is part of the written split.
Microsoft 365 tenant
Day-to-day tenant hygiene stays with us where the split assigns it: users and licenses, groups, sharing defaults, and mailbox settings. Identity stays in Entra. See Microsoft 365 for how we operate the tenant.
Endpoints
In-scope Windows, macOS, and mobile devices follow agreed standards for updates, protection, and encryption where the device handles business information. A lost or unmanaged device is an exposure to close — with clear ownership between your team and us.
Email and authentication
Inbound filtering, mailbox permissions, forwarding, and authentication controls are handled with the tenant under the written split — so phishing and quiet forwarding are not left as tribal knowledge on one admin’s desk.
Documentation and handoff
What changed, who approved it, and how to reverse it stay documented enough that either bench can pick up the work. Documentation keeps either bench able to pick up the work.
On-site
On-site is part of the relationship when we agree it should be. Many co-managed clients keep day-to-day presence with their own team; others want us in the building for agreed work.
Security and compliance when in scope
When security or compliance operations are in the written split, We run that work beside your team. See Cybersecurity.
When full managed IT is the better path
- Remote IT, Complete IT, and Secure IT — ALCON DTS is the primary IT function for organizations without (or not keeping) a full internal IT bench. Published packages and prices live on Managed IT Services.
- Co-Managed IT — your internal IT remains; ALCON DTS is the operator and overflow for the tenant, endpoints, email, and agreed security work.
- A one-time migration or assessment can still help. Ongoing co-managed is the written split beside your team when that is the model you want — we agree which fits in the review.
Start with a review
A co-managed review with ALCON DTS maps what your internal team owns today, where tenant, email, devices, and logging are exposed, and a written split of who owns what.
Managed IT Services · Remote IT · Complete IT · Secure IT · Microsoft 365 · Cybersecurity
Keep your IT team. Add an operator for the tenant.
Extend the people who know your business with an operator beside them for the tenant, endpoints, email, and agreed security work.
