Home › Services › Tenant Lockdown

Microsoft 365 Tenant Lockdown

The numbered fixes from your Checkup, done in stages so nobody is locked out on a Monday morning.

Price

• $1,450 up to 10 people ($1,150 without Entra ID P1 / Business Premium)
• $2,450 for 11–25 people ($1,950 without Entra ID P1 / Business Premium)
• $3,450 for 26–50 people
• $4,450 for 51–100 people

100% of your Checkup fee is credited if you book within 30 days of the report. When you book Tenant Lockdown, the one-time setup fees for DMARC Monitoring ($250), Microsoft 365 Backup ($150) and Security Awareness Training ($150) are waived if you add them.

What’s included

• MFA for every user, rolled out in groups with a staff notice
• Conditional Access rules tested in report-only mode first, then turned on with your OK
• An emergency (break-glass) admin account, stored safely
• Outside mail forwarding blocked, anti-phishing and safe links tightened
• Legacy sign-in methods that skip MFA turned off
• Only admins can approve third-party apps (with an approval request workflow for staff), and risky app permissions nobody owns revoked with your OK
• A change log of every setting changed, and a one-page summary for your cyber-insurance questionnaire

What’s not included

• Laptop enrollment (see Intune Device Rollout)
• Help desk, printers and phones
• Anything not on the numbered list in your signed scope (quoted separately)

Keep it locked down: add the Annual Conditional Access Review so new staff, apps and Microsoft changes do not reopen gaps. Related: MFA and cyber insurance.

This is not a help desk: printers, desk phones and slow computers stay with whoever handles them today. Reports do not guarantee insurer approval or certify any compliance program. Follow-on work covers only the numbered fixes in your signed scope; anything beyond that list is quoted separately. All services · Sample report · How remote service works · FAQ