Nexys manages the tenant behind your email, files, collaboration, user identities and devices, with documented settings and clear ownership of day-to-day administration.
Planned migrationsCutovers are scheduled to limit disruption
Identity firstAccess and authentication are designed early
Licensing reviewedPlans are matched to actual roles and needs
Connected administrationDomain, mail, identity, files and devices
Microsoft 365 needs ongoing administration
Teams change, licences accumulate, external sharing expands and security controls evolve. A regular review keeps access, billing and policies aligned with the way the organisation actually works.
Access reviewed when people join and leavePolicies written down, not held in one person's headLicences matched to roles, usage and required features
What we administer
Setup, migration and ongoing administration
Exchange OnlineMailboxes, shared mailboxes, distribution groups, mail flow rules, spam and phishing protection, DNS records for delivery.
SharePointSite structure, document libraries, permission models and external sharing rules that people can actually follow.
OneDrivePersonal storage, sync settings, retention and recovery options for files that are deleted or changed unexpectedly.
TeamsTeam and channel structure, guest access, meeting policies, and phone or calling plans where you need them.
Entra IDUsers, groups, roles and single sign-on: the identity layer everything else depends on.
Conditional AccessConditional Access policies based on identity, risk, location and device state, where the selected licences support them.
IntuneLaptop and phone enrolment, compliance policies, app deployment and remote actions where the selected licences and device platform support them.
LicensingThe right plan per role, reviewed as the team changes, so you're not paying for seats nobody signs into.
Email securityMail protection settings and domain authentication records, including SPF, DKIM and DMARC, configured to reduce spoofing and improve delivery trust.
Backup & recoveryIndependent backup can be added for supported Microsoft 365 workloads, with the coverage, retention and restore process agreed in the service scope.
Compliance & retentionRetention, eDiscovery and audit settings configured around documented business or legal requirements and the available Microsoft 365 licences.
User supportYour people email us directly about mail, files, permissions and devices, instead of routing every question through one internal person.
Microsoft 365 plan guidance
Microsoft licences are billed per user. Nexys helps select and administer them
Business BasicTeams that live in the browser and mostly need mail and shared files.
✓Business email and calendars✓Web and mobile Office apps✓Teams, SharePoint and OneDrive
Business StandardFor teams that need the desktop Office applications as well as cloud email and collaboration.
✓Everything in Basic✓Desktop Word, Excel, Outlook✓Webinars and bookings
Business PremiumFor organisations that need additional identity, device management and security capabilities.
✓Everything in Standard✓Intune device management✓Advanced threat and access control
Retention and backup solve different problems
Microsoft 365 includes native retention, recycle-bin and recovery capabilities, but coverage and recovery windows depend on the workload, configuration and licence. Those controls should be reviewed against the recovery the business expects.
Where independent backup is appropriate, Nexys defines the protected workloads, retention period, restore process and ownership in the written scope.
Microsoft 365 · kordan.onmicrosoft.com
Daniel Novák is leaving
7 of 11 completeLast day · 15 August
MailboxRetained 24 months
Files412 owned
DeviceLocked
LicenceReclaim pending
Access closes in the right order
Automated at 17:00
✓Account and sessions blocked
✓Mailbox converted and delegated
✓Company device locked
✓Teams ownership reassigned
●OneDrive ownership transfer
○Licence returned to the pool
SecuritySecurity controls matched to people and devices
We review multi-factor authentication, administrator roles, access policies, device compliance and data-handling requirements. The final configuration depends on the organisation, chosen licences and Microsoft service availability.
01
Tenant reviewUsers, licences, sharing, admin roles and security defaults, written up plainly.
02
Plan and written scopeYou receive the priorities, dependencies, sequence, responsibilities and price for the agreed migration or improvement work.
03
ImplementIdentity and policy first, then migration, out of hours where it affects people.
04
AdministerDay-to-day requests, access reviews and licence checks on a monthly rhythm.
How it's priced
Tenant setup, migration and improvement projects are quoted against a written scope. Ongoing administration can run as a monthly service, either on its own or alongside website management.
Practical answers about ownership, migration, licensing, backup and administration.
The tenant should remain under the client organisation's ownership. Nexys works through named administrator access, documents the roles it uses and supports a controlled handover when the service ends.
Start with a tenant review
We review users, administrator roles, licences, sharing and security settings, then explain which changes are worth prioritising.