Running the MSP security practice: GDAP, Lighthouse, NCE and licensing strategy, PowerShell automation, migrations, QBR reporting, and vCISO services.
Five PowerShell scripts that auto-document licensing, MFA status, Exchange, and Intune into Syncro, and create user contacts on the customer record, so the documentation maintains itself.
Forgotten licenses on converted shared mailboxes quietly drain margin. Here is a scheduled Azure Function, plus a local script, that finds and strips them across all your customers.
Move recurring PowerShell jobs off an on-prem server and into serverless Azure Functions, authenticating to every customer tenant with the secure application model.
Microsoft lets end users buy subscriptions on their own credit card, outside your CSP margin. Here is a one-script way to disable self-service purchasing across all the tenants you manage.
A GoDaddy-federated Microsoft 365 tenant can't move to CSP or Direct. Here is how to defederate it in place, keep every user account, and bring it under your management with no downtime.
GoDaddy email comes in two flavors, IMAP and the 365 syndicate program, and each needs a different move. Here are the tools, the playbooks, and why some tenants need a full migration.
A full walkthrough for migrating on-prem home drives to each user's personal OneDrive: pre-provision the sites, grant impersonation rights, and run the free SharePoint Migration Tool.
Configuring the same M365 Business controls for every client is slow and error-prone. This PowerShell runbook builds a full environment, MFA, DLP, ATP, Intune, in a single command.
As of April 2019, Shift, Silver Competency, and Sky's the Limit stack on the same net-new 365 customers. Here is the math that pushes margin to 47%.
Microsoft competencies are a kickback program in disguise. As of April 2019, four net-new customers and a $1,670 fee can net an MSP $1,030 a year on the 6% rebate alone.
Configuring Intune by hand across a client base is slow and error-prone. A PowerShell runbook can stamp out compliance policies, BitLocker, and required apps in a single command.
M365 Business gained features that close the security gap with E3. As of April 2019, the deciding factors are user count, Intune adoption, Windows 10 upgrades, and RDS.
