Step by step guides from the tenant.
Longer how-to and fix-it guides for the Microsoft 365 and Intune problems we solve across client tenants. Written by the engineers who do the work. For the short weekly findings, see the notes from the tenant.
18 October 2026Microsoft 365 security when you have no IT team
Running Microsoft 365 with nobody looking after it? Why no IT team is the risky bit, the handful of settings that actually matter, and why the defaults are a floor not a finish.
Read the guide →
15 October 2026Microsoft 365 Business Premium security checklist for small firms
The checklist we work through when we harden a small firm's tenant, written so you can run down it yourself. Nothing here needs a licence beyond Business Premium. Free to read and print.
Read the guide →
12 October 2026Do you need Intune if you already have Microsoft 365 Business Premium?
Business Premium includes the Intune licence, so is device management handled? The honest answer, what included really means, and the gap between having Intune and Intune actually protecting you.
Read the guide →9 October 2026What a Microsoft 365 security assessment actually includes
Security assessment can mean a five minute automated score or a week of real work. What a proper Microsoft 365 assessment checks, what you walk away with, and how to spot a glorified sales report.
Read the guide →6 October 2026Windows Autopatch vs manual update rings for a small company
Two ways to keep Windows patched in Intune, and small firms often pick the wrong one. The honest difference between update rings you run yourself and Windows Autopatch, and which suits a small team.
Read the guide →3 October 2026Apple Business Manager setup for a small firm, start to finish
If your firm buys Macs or iPhones for work, Apple Business Manager makes them manageable from the box. How to set up ABM, link it to Intune, get devices in, and the gotchas that catch people.
Read the guide →30 September 2026How to find unused Microsoft 365 licences and stop paying for them
Most firms pay for Microsoft 365 licences nobody uses. Where the waste hides, how to find it with the admin centre and sign in logs, and how to reclaim it without losing data.
Read the guide →27 September 2026How to deploy Win32 apps with Intune without them failing silently
Intune says the app installed but it is not on the machine, or it fails with a cryptic code. The few things behind almost every Win32 app failure, and how to read the log that tells you which.
Read the guide →24 September 2026How to properly disable a leaver in Microsoft 365: the full checklist
A rushed offboarding leaves doors open. The order that actually locks a leaver out of Microsoft 365, keeps their data, and frees the licence, plus the bits people forget.
Read the guide →21 September 2026How to enforce BitLocker and escrow recovery keys with Intune
Encrypt every Windows laptop and make sure you can actually recover it. How to enforce BitLocker with Intune, escrow the keys to Entra, and prove it took.
Read the guide →18 September 2026Set up Conditional Access that requires MFA without locking yourself out
The safe way to require MFA for everyone with Conditional Access: a break glass account, report-only first, and the exclusions that stop you locking yourself out.
Read the guide →15 September 2026Fix: Autopilot Enrollment Status Page stuck or failing
Autopilot ESP hanging or timing out on new laptops? The three causes we see most often, how to read the logs, and how to stop it happening again.
Read the guide →12 September 2026Block legacy authentication in Microsoft 365, step by step
Legacy authentication quietly bypasses MFA. Here is how to find who still uses it, block it safely with Conditional Access, and not lock anyone out.
Read the guide →