Account and access audit
Find out who can still get in, and close what should be closed.
A review of every account, shared mailbox, old vendor login, and file share so people who left really are gone. You get a written list of who can reach what, what we closed, and what still needs a decision from you.
The problem, and what we do about it
Access piles up. A bookkeeper from two years ago still has the bank portal login. A former office manager's mailbox forwards to nowhere. The Wi-Fi password is the one the painters were given. A shared folder is open to anyone with the link. None of it shows up until a question from an insurer, a customer, or a departure on bad terms.
We go system by system. Microsoft 365 users, guests, shared mailboxes, admin roles, and connected apps. The domain registrar, DNS, website, and hosting logins. The network, camera, and door systems. Banking, payroll, and the industry software you name, where we review the user lists with you and you make the changes. Everything lands in one written list, with the accounts we closed, the ones that need your decision, and a recommended owner for each.
Who it's for
Honest on purpose, so nobody wastes a call.
A good fit
- Businesses that have had staff or an IT provider leave in the last few years
- Owners who cannot say who holds the admin login for the domain, email, or the network
- Firms answering an insurer or customer question about access control and former employees
Not a fit
- Changes to systems without the owner's written authorization
- A formal audit or certification. This is a working review with a list you can act on
What you get
Written down so there are no surprises on the quote.
What's included
- Every Microsoft 365 user, guest, shared mailbox, admin role, and connected app reviewed
- Domain, DNS, website, hosting, network, camera, and door logins listed with who holds each
- Banking, payroll, and industry software user lists reviewed with you, with changes made by you or the vendor
- File shares and links open to anyone, found and reported
- Accounts of former staff and vendors closed, with your written OK, and shared passwords they knew changed
- Admin rights reduced to the people who need them
- A written access list with a recommended owner and recovery contact for each account
What it's not
- Changing systems we are not authorized to touch. For those you get the list and we walk you through it
- Fixing what the audit finds beyond closing accounts and changing passwords, which is quoted separately
- A guarantee that every account anywhere was found. We review the systems you name and the ones we can see
- Legal or HR advice around a departure
What it costs
New services are quoted after a short review, so the price fits your setup instead of a guess. You get a fixed price in writing before any work starts.
| What | Price |
|---|---|
| Account and access audit, review, closures, and the written list | Quoted after a short review |
| Fixes found during the audit | Fixed price in writing |
| Keeping accounts right as people start and leave afterward | Included in the monthly care plan for Microsoft 365 |
| Office checkup first | $350, credited once toward a fixed-price project or care plan onboarding within 30 days |
See the price for this on the pricing page
The quote lists the systems in scope. Microsoft 365, the domain, and the network are standard. Each additional system you name is added as a line so the price matches the work.
What it depends on
- Written authorization from the owner before any account is closed or any password is changed
- Admin access to Microsoft 365, the domain registrar, and the network, or the person who holds it
- A list from you of the banking, payroll, and industry systems to include, and someone who knows how each one is used
Next step
Book a 15-minute call and tell us roughly how many people have come and gone in the last few years, and which systems worry you most.
How it works
Simple on purpose. You always know what's next and what it costs.
A 15-minute call
Tell us what's going on. We'll tell you honestly if we're a fit.
A quick look
A short visit or a remote session so we see your setup for real.
A fixed price in writing
What we'll do, what it costs, and when. The price doesn't move.
Scheduled work
We book a time that doesn't shut your business down, then get it done. Reply times and support hours are on the service levels page.
Questions owners ask
How is this different from the office checkup?
The checkup is one hour across everything, computers, Wi-Fi, email, backups, and cameras, with a prioritized list. The audit goes deep on one thing, who can get into what, across every system you name, and closes the accounts that should be closed.
Can you close accounts in our bank or payroll system?
No. We review the user lists with you and you or the vendor make the change. The list tells you exactly what to remove and why.
Someone is leaving today. Is this the right page?
No, call or text now. A single departure is handled on the new hires and departures page, and during support hours sign-in is blocked first. The audit is for everything that built up before today.
Do staff notice?
Some do. Shared passwords they relied on get changed and admin rights they did not need get removed. We tell you before each change so you can tell them, and nothing happens without your written OK.
What does it cost?
It depends on how many systems and people are in scope, so we quote it after a short review. The price is fixed in writing before we start.
Sources we used
- Microsoft Learn, remove a former employee from Microsoft 365
- NIST, small business cybersecurity basics
Public guidance we relied on for the facts on this page. None of it endorses Vektrion.
Ask a quick question, get a straight answer
Three fields. You hear back the same business day by text or email, whichever you give us.
Stop being your own IT person.
Tell us what's bugging you. In 15 minutes you'll know what it takes to fix and roughly what it costs.