Microsoft 365
A Microsoft 365 tenant that is designed, secured and documented.
Most tenants grow one project at a time: a migration here, a policy there, licences bought for a feature nobody configured. We engineer Microsoft 365 properly, from scripted, documented configuration, and can run it for you afterwards.
Start with a Microsoft 365 security assessment
The problem with most tenants
Conditional Access policies that nobody can explain, Intune half rolled out, Defender licensed but not tuned, SharePoint shared with everyone, and a licence mix that grew by accident. Each gap is small. Together they leave the organisation exposed and paying for features it doesn't use.
What we engineer
- Tenant-to-tenant migration for acquisitions, mergers, divestitures, rebrands and consolidation
- Microsoft 365 migrations: Exchange on-premises and hybrid to Exchange Online, file servers to SharePoint and OneDrive, SharePoint on-premises to Online, Google Workspace to Microsoft 365
- Identity: Active Directory to Microsoft Entra ID, Conditional Access, MFA and passwordless, Privileged Identity Management
- Modern Workplace: Intune, Windows Autopilot, Windows Autopatch, Windows 11, and macOS and iOS management
- Microsoft Defender XDR and Microsoft Sentinel, rolled out without breaking line-of-business applications
- Microsoft Purview: sensitivity labels, data loss prevention, retention, eDiscovery and audit
- Collaboration governance for SharePoint and Teams: sharing, guest access, lifecycle and permissions
- Teams Phone
- Licensing: the right mix of Business Premium, E3, E5 and add-ons, supplied through us or your existing partner
How we work in your tenant
Configuration is scripted and documented, and kept in a repository in your tenant, so every policy has a reason and a record. Changes are piloted with real users, rolled out in rings and reversible. Senior engineers do the design and the build.
After the project
Managed Microsoft 365 and security keeps the tenant in shape: security posture, Intune and device policies, Defender and Sentinel tuning, Purview policies, identity and Conditional Access, licence reviews, a monthly report and a service desk for your users. Engineering stays with North Ark engineers.
Automation and AI
Tenant configuration checks, drift detection and reporting run as automation, so the monthly report shows what changed rather than what someone remembered. When you are ready for Microsoft 365 Copilot, the same engineers make sure your permissions and labels are ready first.
Experience behind it
Before North Ark, our founder's work included Microsoft 365 compliance projects, Microsoft Teams and Modern Workplace projects, SharePoint migrations, Defender for Endpoint implementations, Microsoft Sentinel engineering and data migrations of 20TB and more.
Questions buyers ask
Do you provide a service desk for our users?
Yes, as part of Managed Microsoft 365 and security. Engineering work stays with North Ark engineers, and you are told who has access to your environment whenever access is granted.
Can you supply our Microsoft 365 licences?
Yes. We can supply licences through the Microsoft Cloud Solution Provider program, or work with your existing licensing partner.
Do you set up Teams Phone?
Yes. We design and implement Teams Phone as part of Modern Workplace work, including calling plans or Operator Connect and number porting.
Can you take over a tenant someone else configured?
Yes. We start with a Microsoft 365 security and tenant health assessment, document what exists, and fix the highest risks first.
Do you build intranets or Power Platform apps?
Our Microsoft 365 work covers engineering, security and governance. Intranets, apps and custom software are scoped separately as software projects.
Do you work with Google Workspace or AWS?
We migrate Google Workspace to Microsoft 365, and we work with AWS where it is part of a hybrid estate alongside Azure.
Start a conversation
Get your tenant engineered properly.
Tell us what is changing in your Microsoft 365 environment.
Talk to an Engineer