Active Directory and Microsoft 365 reviews
Active Directory and Microsoft 365 sit underneath almost everything your staff do, and they tend to collect years of quick fixes, old accounts and settings nobody remembers making. A review shows you what’s actually there, what’s putting you at risk and what you’re paying for without using. The same problems come up again and again: old passwords, permissions scoped far too widely, and accounts with no MFA.
On the Active Directory side the review covers domain controllers, DNS, Group Policy, shared folders, and the share and security permissions on them. On the Microsoft 365 side it covers Entra ID and its sync with Active Directory, MFA and conditional access. It also covers SharePoint and OneDrive, licences, enterprise apps and Intune.
You get a written report on everything I find and a plan of action in order of priority. A wider review of your network, servers and backups is also an option if you’ve inherited IT nobody fully understands. I can carry out the fixes and clean-up myself, or you can hand the plan to your IT provider or in-house team.
If the review finds security gaps, network and cyber security work is the natural next step.
If you’d like the background first, Microsoft’s overview of Active Directory Domain Services explains how it stores your user accounts and controls who can sign in to what.
What it involves
Active Directory and Group Policy
Domain controllers, DNS and Group Policy checked, accounts that still belong to people who’ve left removed, and years of quick fixes untangled and cleaned up.
Shared folders and permissions
Shared folders, share permissions and security permissions mapped, so you know who can open what, and access follows people’s roles rather than history.
Entra ID and conditional access
Entra Connect sync from your Active Directory, MFA for every account, conditional access policies, and the enterprise apps your staff sign in to.
Microsoft 365 and Intune
Licences, SharePoint, OneDrive, sign-in and sharing settings and Intune device policies, including any licences you’re paying for but not using.
Questions about an IT review
How is a review charged?
Either at a fixed price or by the day, agreed for each project once I know what you have.
Will a review disrupt our staff?
Very little. Most of the work is looking at settings and logs, and nothing is changed until you’ve seen the report and agreed the plan.
Do we have to use you to carry out the recommendations?
No. The report and plan are yours, written so your IT provider or in-house team can work from them. You can ask me to carry out some or all of the work, but there’s no obligation either way.
Related services
Microsoft 365 and Google Workspace
Microsoft 365 or Google Workspace set up, tidied or migrated, with sign-ins and email properly secured.
Network and cyber security
The basics that stop most attacks, done properly: firewalls and UTMs, network separation, access rights and endpoint protection with EDR.
IT policies and procedures
Written procedures that reduce risk and make IT predictable, from starters and leavers to incident response.
Interested in an IT review?
