Business Premium hardening
Turn on the security you already pay for in Microsoft 365.
Business Premium includes device management, sign-in rules, and passkeys. Most small offices pay for the license and never switch them on. We set them up so a stolen password alone cannot get in, and write down what is on.
The problem, and what we do about it
Microsoft 365 Business Premium costs more than Business Standard because it includes Intune for managing devices, Conditional Access for sign-in rules, Defender for Business, and support for passkeys. Out of the box almost none of that is turned on. The license is paid every month and the protection sits idle.
We turn it on in the right order. Devices are enrolled so only computers your business knows about can open email and files. Sign-in rules require two-step login everywhere and block logins from places and devices that make no sense for your office. Passkeys or security keys go to the owner, the admins, and whoever handles payments first, because a fake login page cannot capture them. Every setting is written down with a rollback note, and we test it with a few people before everyone gets it.
Who it's for
Honest on purpose, so nobody wastes a call.
A good fit
- Offices already on Business Premium with the protections left at their defaults
- Businesses whose insurer or customer asks about managed devices or sign-in rules
- Firms moving up from Business Standard that want the upgrade to mean something
Not a fit
- Offices on Business Basic or Business Standard, until the licenses change. We check your plan first and show what the upgrade costs at Microsoft's price
- Businesses on Google Workspace or another email platform
What you get
Written down so there are no surprises on the quote.
What's included
- A review of your current Microsoft 365 plan and what the licenses already include
- Devices enrolled in Intune with a baseline for updates, disk encryption, and screen lock
- Conditional Access rules that require two-step login everywhere and block sign-ins that make no sense for your office
- Passkeys or security keys for owners, admins, and whoever handles payments
- Microsoft Defender for Business turned on and reporting, when your license includes it
- A test group first, then a scheduled rollout with staff told what changes
- A written record of every setting, with a rollback note
What it's not
- The Business Premium licenses themselves, which you pay to Microsoft at their price
- Computers too old to run a supported Windows version, which are listed and quoted for replacement
- Personal phones, which are a separate project, see business data on personal phones
- A promise that no account can ever be broken into. These controls make it far harder, not impossible
What it costs
New services are quoted after a short review, so the price fits your setup instead of a guess. You get a fixed price in writing before any work starts.
| What | Price |
|---|---|
| Business Premium hardening, review, rollout, and documentation | Quoted after a short review |
| Microsoft 365 Business Premium licenses | Paid to Microsoft at their price |
| Keeping the rules current as people and devices change | Included in the monthly care plan for covered people |
| Microsoft 365 setup for an office starting from scratch | From $1,200, up to 10 people |
See the price for this on the pricing page
The quote names the number of people and devices it covers. If a protection needs a license you do not have, we say so and show Microsoft's price before anything is bought.
What it depends on
- Business Premium licensing for every person covered. Device enrollment and sign-in rules do not work on Business Basic or Business Standard
- Computers on a supported Windows or macOS version
- The owner's written OK before sign-in rules are enforced, since a wrong rule can lock people out
- A few hours of staff time to enroll devices and set up passkeys
Scheduling
A small office is usually done over a few scheduled sessions, with a test group running first so nobody is locked out by surprise.
Next step
Book a 15-minute call and tell us which Microsoft 365 plan you have, how many people use it, and whether the computers are company owned.
How it works
Simple on purpose. You always know what's next and what it costs.
A 15-minute call
Tell us what's going on. We'll tell you honestly if we're a fit.
A quick look
A short visit or a remote session so we see your setup for real.
A fixed price in writing
What we'll do, what it costs, and when. The price doesn't move.
Scheduled work
We book a time that doesn't shut your business down, then get it done. Reply times and support hours are on the service levels page.
Questions owners ask
We already pay for Business Premium. Why is nothing turned on?
Microsoft sells the license. Turning on device management, sign-in rules, and passkeys is setup work the business or its IT company has to do, and most small offices never get to it. The license includes the tools. This project switches them on.
Can this lock people out?
A wrong sign-in rule can, which is why we start with a test group, write every rule down with a rollback note, and keep an emergency admin account that the rules do not touch. Staff are told what changes before it changes.
What is a passkey?
A way to sign in with your phone or a small security key instead of a password and a code. A fake login page cannot capture it, which is why owners, admins, and whoever pays invoices get them first.
Do we have to enroll personal phones?
No. This project covers company computers. Business email on personal phones is handled with app protection instead, see business data on personal phones.
What does it cost?
It depends on how many people and devices are covered and what is already on, so we quote it after a short review. The price is fixed in writing before we start.
Sources we used
- Microsoft Learn, Microsoft 365 Business Premium security FAQ
- CISA, implementing phishing-resistant MFA
- Microsoft Learn, Intune app protection policies
Public guidance we relied on for the facts on this page. None of it endorses Vektrion.
Ask a quick question, get a straight answer
Three fields. You hear back the same business day by text or email, whichever you give us.
Stop being your own IT person.
Tell us what's bugging you. In 15 minutes you'll know what it takes to fix and roughly what it costs.