Managed Microsoft 365
ALCON DTS manages identity, email, sharing, logging, and license hygiene inside your IT package so your tenant stays secure, organized, and defensible.
Who we support
Owners and operations leaders who need Microsoft 365 managed as part of dependable IT — not treated as an annual license event.
The service covers Microsoft 365 tenant operations. SKU procurement is handled as part of IT; Azure workloads and larger cloud architecture are scoped through managed IT.
- Clinics with Microsoft 365, mixed Windows and Apple devices, or multiple locations
- Owners and operations leaders who need the tenant managed as part of IT
- Regulated teams handling ePHI, HR, financial, legal, or proprietary information
Six managed workstreams
Clear ownership for the tenant controls that shape access, collaboration, security, records, and cost.
1. Identity and Entra
- Multi-factor authentication and enrollment
- Conditional Access based on user, device, location, and risk
- Least-privilege admin roles
- Joiner, mover, and leaver access changes
2. Exchange and email security
- Mailbox ownership and lifecycle
- DMARC, DKIM, and SPF operations
- Protection against spoofing and look-alike domains
3. Teams, SharePoint, and OneDrive
- Sharing defaults and guest access
- Permission review for collaboration spaces
- Clear ownership for shared content
4. Defender and Secure Score
- Tenant security settings used deliberately
- Quarterly review of what changed and why
5. DLP, Purview, and audit logging
- Retention and audit logs you can produce
- DLP aligned with how your organization shares
6. License hygiene
- Right-size SKUs and remove inactive assignments
- Copilot and add-ons only after permissions and data boundaries are ready — see AI Readiness and acceptable use
- Written view of licensing and managed work
Service scope
Microsoft 365 licensing and procurement are included as part of the IT relationship. ALCON DTS is not a license broker; we connect the right subscription decisions to the tenant work we manage.
Azure and hybrid workloads are scoped through managed IT. Copilot follows a permissions, sharing, and data-boundary review; when the tenant is ready, we can plan the rollout. See AI Readiness, acceptable use, and how to prepare permissions.
- Licensing and procurement as part of the IT relationship
- Not a license broker; subscription decisions connect to managed tenant work
- Azure and hybrid workloads scoped through managed IT
- Copilot only after permissions, sharing, and data-boundary review; see AI Readiness and acceptable use
Packages and pricing
Microsoft 365 tenant work stays connected to the IT package that fits the organization. These existing tiers keep the service scope and pricing visible.
Existing tiers: Remote IT $100–$150/user; Complete IT $150–$250/user; Secure IT $250–$400/user.
- Remote IT
- Complete IT
- Secure IT
REMOTE IT
$100–$150/user
Remote-first support for a managed tenant.
- Unlimited Remote Support
- Monthly Maintenance Service
- Anti-Virus Protection
- 24/7 Server Monitoring
- Vendor Management
- Quarterly Business Review
COMPLETE IT
$150–$250/user
Comprehensive IT with tenant management and on-site support.
- All Remote IT Plus
- Onsite Support
- Cybersecurity Awareness Training
- Business Continuity Planning
- EndPoint Protection
- Spam Filtering
SECURE IT
$250–$400/user
Enhanced security and compliance support for the tenant.
- All Complete IT Plus
- vCISO Service
- Business Continuity Solution
- Email Phishing Security Testing
- Cybersecurity Framework Guidance
- Network Device Management
When ePHI is in Microsoft 365
Mail, Teams, and shared files can hold ePHI. Access, guest sharing, departed accounts, retention, and audit logs must be managed as part of the healthcare program.
- Access
- Guest sharing
- Departed accounts
- Retention
- Audit logs
ALCON DTS signs a Business Associate Agreement for in-scope services. BAA, configuration, and vendor due diligence belong in the documented HIPAA program — not in a marketing label. See Healthcare IT and HIPAA consulting.
Teams Phone can be implemented alongside RingCentral and Allworx; see VoIP.
Proof starts with a 20-minute tenant review
We begin with your tenant: Secure Score, Conditional Access, sharing, email authentication, admin roles, and license assignments. You leave with a clear view of priorities and the work required.
- Priorities / clear view of work required
- Secure Score
- Conditional Access
- Sharing
- Email authentication
- Admin roles
- License assignments
Articles support the review: five Microsoft 365 settings worth checking, Copilot permissions, Windows 10 risk, and email authentication.
FAQ
Can you migrate us from Google Workspace?
Do you manage Macs in Intune?
Will you enable Copilot?
Can you fix “anyone with the link” sharing?
Do you handle DMARC?
Make your tenant defensible
We will review the tenant you have, explain the priorities, and connect the work to the IT package that fits.
