Microsoft 365 health check in Adelaide
Most Microsoft 365 setups start tidy and drift. Staff come and go, someone adds a forwarding rule, sharing gets opened up for one project and never closed. A Microsoft 365 health check goes through your tenant setting by setting and tells you what's safe, what's risky and what you're paying for but not using.
Last updated
From $690 (ex GST) for a typical small business, done remotely. Every business is different, so call us and we'll work out the right scope and price together. See all our prices
Part of: Microsoft 365
The short answer
A Microsoft 365 health check reviews how a business's tenant is set up: multi-factor authentication and sign-in policies, admin roles, mailbox forwarding rules, external sharing in SharePoint, OneDrive and Teams, email authentication, device management, Microsoft Secure Score and licences. WaTo Consulting runs these reviews for Adelaide businesses remotely and changes nothing until you approve it.
Why check Microsoft 365 at all?
Email is still the most common way into a small business. The Australian Signals Directorate's latest threat report lists email compromise and business email compromise fraud as the top two cybercrimes reported by businesses. Most of the protection against that is already in your Microsoft 365 plan. It just needs to be switched on and set up properly, and that's what this check confirms.
What we review
Sign-in security
Multi-factor authentication for every account, legacy sign-in methods that skip it, and sign-ins from unusual countries.
Admin roles
Who holds Global Admin, whether those accounts are protected, and admin access left with old providers.
Mail rules and forwarding
Rules that quietly forward mail outside the business, a favourite trick after a mailbox is hacked.
Sharing
Anyone links, guest access and external sharing across SharePoint, OneDrive and Teams.
Email protection
SPF, DKIM and DMARC on your domain, anti-phishing policies and safe links and attachments where your plan includes them.
Secure Score
Your Microsoft Secure Score explained in plain English, with the handful of actions that make a real difference.
Devices
Which phones and laptops can reach company data, and whether Intune or basic mobility controls are in place.
Licences
Seats for people who have left and plans that don't match how people work.
Who it's for
- Businesses that moved to Microsoft 365 years ago and haven't looked at the settings since.
- Owners who have had a staff member's mailbox hacked, or come close.
- Teams changing IT provider who want to know what the old provider left behind.
- Anyone answering a cyber insurance question about multi-factor authentication and not sure of the honest answer.
How it works
- You give us read access. We use a reader role where possible, so nothing changes during the review.
- We go through the tenant. Settings, policies, sign-in logs, mail rules, sharing reports and Secure Score, all done remotely.
- We rate what we find. Red, orange or green for each item, with a plain reason and the steps to fix it.
- We walk you through it. A short call to go over the results. You approve any changes before we, or your provider, make them.
Why WaTo for a Microsoft 365 health check
- We set up and look after Microsoft 365 for Adelaide businesses every day.
- We explain the settings in terms of what they protect you from, not as a score to chase.
- We check licences in the same pass, so a tighter setup doesn't cost you more than it needs to.
- Use Google Workspace instead? We review that the same way.
Microsoft 365 health check questions
Do you need full admin access?
No. A global reader role covers almost everything we look at. We'll tell you exactly what access we need before we start.
Is a high Secure Score enough?
Not on its own. Microsoft says Secure Score isn't an absolute measure of how likely you are to be breached. It's a useful list of settings, but some points matter far more than others for a small business. We focus on those.
How long does the review take?
For most small businesses it's done within a week, remotely, with a short call at the end.
Will the changes lock staff out?
Not if they're rolled out properly. We plan things like multi-factor authentication with you, warn staff first and switch them on in stages.
Related services
- Microsoft 365 security hardening
- Microsoft 365 licence review
- Full IT health check
- Multi-factor authentication setup
Guides on this topic
- Microsoft 365 security baseline for small businesses
- Business email security: the practical checklist
- SPF, DKIM and DMARC in plain English
- IT health check checklist: 24 questions for small business owners
Sources & references
Want a second look at your Microsoft 365?
Tell us roughly how many users you have. We'll explain what access we need and give you a fixed price.
Mon to Fri, 8:30am to 5pm
