Multi-factor authentication
MFA enforced on every account, using the Microsoft Authenticator app with number matching rather than text messages wherever possible.
Entra ID & Intune
Control over who signs in, and over every device that touches company data.
What are Entra ID and Intune?
Microsoft Entra ID, formerly Azure Active Directory, is the identity service behind every Microsoft 365 sign-in: users, passwords, multi-factor authentication and access policies. Microsoft Intune is the device management service that enrols company laptops and phones, keeps them patched and configured, and can remove company data from a lost or departing device.
Most Microsoft 365 break-ins start with a stolen password, and most data leaks start with an unmanaged device: a laptop that left with a former employee, or a personal phone holding the company mailbox with no passcode. Both are problems of identity and device control, not antivirus.
We configure Entra ID so every sign-in is verified and risky ones are blocked, and enrol company devices in Intune so they are patched, encrypted and set up to the same standard. When someone joins or leaves, access changes in one place.
What is included
Everything in the service.
Conditional Access
Rules that block sign-ins from unexpected countries, outdated sign-in methods or unmanaged devices, and require MFA for anything sensitive.
Joiner and leaver process
A set routine, so new staff have the right access on day one and leavers lose it the moment they go.
Intune enrolment and Autopilot
Windows laptops and Macs enrolled and configured centrally, with Windows Autopilot so a new laptop sets itself up out of the box.
Security baselines
Disk encryption, firewall, screen lock and update rings applied by policy rather than by hand.
Phones and tablets
Company phones fully managed, and personal phones given app protection so company data can be removed without touching personal photos.
Administrator protection
Separate admin accounts, least-privilege roles and alerts whenever a privileged role changes.
Questions
Entra ID & Intune, answered.
Which Microsoft 365 licence do we need?
Conditional Access and Intune come with Microsoft 365 Business Premium, which includes Entra ID P1. Business Basic and Standard offer security defaults, which enforce MFA but give far less control. We review your licences and recommend the smallest change that covers what you need.
Can you see what staff do on their personal phones?
No. On personal devices we use app protection policies, which only govern company apps such as Outlook and Teams. We cannot see personal apps, photos or messages, and a selective wipe removes only company data.
What is Windows Autopilot?
A Microsoft service that registers new laptops to your organisation. When an employee turns one on and signs in, it configures itself with your settings, apps and security policies, which saves hours per device and means every machine is set up the same way.
Guides
Worth reading first.
Cyber insurance questionnaires: what insurers ask and how to answer
The security questions cyber insurers commonly ask small businesses, what each one is really checking, and why an inaccurate answer can cost you a claim.
Read the guide
How to roll out MFA without the staff pushback
A practical plan for turning on multi-factor authentication in a small business. Which methods to use, how to phase it in and the exceptions to plan for.
Read the guide
Microsoft 365 Business Basic vs Standard vs Premium: which plan do you need?
What each Microsoft 365 business plan includes, where Basic, Standard and Premium really differ, and how to choose the right mix for a small business.
Read the guidePart of Microsoft 365
Related services.
Also from CyberTab
The rest of what we manage.
Web Design & Management
Built, hosted, secured and maintained.
Business VoIP
Cloud telephony on desk, mobile and Teams.
Managed Service Desk
Named engineers and documented response targets.
Business Continuity & Disaster Recovery
Protected backups and tested recovery.
Managed Security
Endpoint protection, threat monitoring and response.
Talk to us about entra id & intune.
A free 45-minute assessment of your environment, licences and support. You get our recommendations on the call, with no obligation to go ahead.