Licensing & optimisation
The right plan per role, reviewed regularly so you stop paying for seats nobody uses.
Microsoft 365 & Cloud
Microsoft 365, properly configured and properly managed.
Buying Microsoft 365 licences is the easy part. Configuring them securely, governing who can reach what, and supporting the people using them every day is where most businesses need help.
- Secure by configuration
- Migrations without the drama
- Licences that match reality
- Exchange OnlineMail that works, and is protected
- Teams & SharePointStructured, not a free-for-all
- IntuneDevices enrolled and compliant
- Entra ID & DefenderIdentity and threat protection
Technologies we work with
- Microsoft
- SOPHOS
- Acronis
- HPE
- 3CX
- UBIQUITI
- veeam
What we manage
The whole tenant, not just the mailboxes
Microsoft 365 is an identity platform, a device platform and a data platform that happens to include email. We manage all of it as one thing, because that is how it behaves.
Exchange Online & Outlook
Mail flow, shared mailboxes, distribution groups, signatures and anti-spam configuration.
Microsoft Teams
Teams, channels and meeting policies set up so collaboration does not turn into sprawl.
SharePoint & OneDrive
A file structure people can navigate, with permissions that match how you actually work.
Entra ID
Identity, groups, single sign-on and conditional access — the foundation everything else sits on.
Intune & device management
Enrolment, configuration profiles, compliance policies and application deployment.
Defender
Endpoint, email and identity protection configured and monitored rather than merely licensed.
MFA & conditional access
Sign-in rules by user, device, location and risk, tested so they do not block legitimate work.
Migrations
From on-premise Exchange, Google Workspace or another tenant, planned around your working week.
Microsoft 365 backup
Independent backup of mail, files and Teams data. Microsoft replicates; it does not restore your mistakes.
Governance
Naming, retention, external sharing and data location policies, written down and applied.
Joiners & leavers
A repeatable process for starting, moving and removing people — including the licence.
The default is not the secure setting
A new tenant is configured for compatibility, not for safety.
Microsoft ships Microsoft 365 so that everything works on day one for every kind of customer. That means permissive sharing, legacy authentication left available, and security features present but switched off. Most of the gap between a risky tenant and a well-run one is configuration you are already paying for.
- Multi-factor authentication enforced, including on administrators
- Standing global admin rights reduced to the minimum
- External sharing scoped rather than open to anyone with a link
- Legacy authentication protocols blocked
- Mailbox auditing and alerting switched on
- An independent backup of mail, files and Teams content
Tenant review
example-company.onmicrosoft.com
Tenant health
6 of 6 checks passing
Configured and monitored
Want the rest of the way? Ask us to review your tenant
Configuration, not a bigger licence
Default
Managed
- Why it matters
- What we change
- Licence needed
Example tenant. Click a check for the detail, or flip between Default and Managed.
Work anywhere
Teams work better, wherever they are
Give your people the tools, access and flexibility to work together in the office, at home or on the move.
In the office
A connected, collaborative workspace for your team.
On the move
Stay productive and protected on any device, from anywhere.
Migrations
Moving to Microsoft 365 without losing a week.
-
Discover
We inventory mailboxes, files, shared resources and the applications that depend on them.
-
Plan
A migration plan with sequence, cutover timing and a rollback position, agreed before anything moves.
-
Migrate
Data is pre-synchronised and the cutover is scheduled outside your busiest hours.
-
Land well
Devices reconfigured, staff shown what changed, and close support for the first week afterwards.
Licensing
Paying for the right thing, for the right people.
Licence sprawl is quiet and expensive. Seats stay assigned to people who left, everyone gets the same plan regardless of role, and features you are already entitled to sit unused because nobody switched them on. We review this as part of the service, not as a favour at renewal.
What a licence review usually finds
- Seats still assigned to leaversPaid for every month until someone notices.
- One plan for everybodyFrontline and office staff rarely need the same thing.
- Entitlements left unusedSecurity and device management already included, never enabled.
- Overlapping third-party toolsPaying twice for something the tenant already does.
Why CaminhoIT
The people who set it up are the people who support it.
Plenty of firms will run a migration and hand you the keys. We manage the tenant afterwards, which changes how it gets built: decisions are made for the version of your business that exists in two years, not for the version that gets the project signed off.
- Security baselinesapplied, not just discussed
- English & Portuguesesupport for your whole team
- Licences reviewedas part of the service
- Backed up properlyindependently of Microsoft
- Joiner/leaver processthat actually gets followed
- Everything visiblein your client portal
Questions
Microsoft 365 questions we are asked most
Does Microsoft back up my data?
Not in the way most people assume. Microsoft guarantees the availability of the service and replicates your data across its own infrastructure, which protects against their hardware failing. It does not protect you against a file deleted months ago, a mailbox wiped by a compromised account, or ransomware that syncs to OneDrive. Retention periods are short and recovery is limited. An independent backup of Exchange, SharePoint, OneDrive and Teams closes that gap, and we include it as standard.
Is CaminhoIT a Microsoft Partner?
We manage Microsoft 365 tenants for clients across Portugal and the UK every day, and we configure them against Microsoft security baselines. We do not claim a formal partner designation on this website, because we would rather state only what we can evidence. If formal status matters to your procurement process, ask us and we will tell you exactly where we stand.
How disruptive is a migration?
For a business of 10 to 100 people, data is normally pre-synchronised over several days and the cutover happens in a single evening or over a weekend. Most people arrive the next morning, sign in and carry on. We will not promise zero disruption — there is usually a short window where mail is delayed and some reconfiguration on each device — but it should be measured in hours, planned in advance, and supported closely afterwards.
Can you take over a tenant that someone else set up?
Yes, and we do it regularly. We start with a review of identity, security configuration, sharing, devices and licensing, and give you a written picture of what is in place before changing anything. Transferring administrative control and billing from a previous provider is a normal part of that handover, and we manage it.
Where is our data stored?
Microsoft 365 tenant data is held in the region selected when the tenant is created, which for our clients is normally the EU or the UK. We can confirm the data location for your specific tenant, and it is one of the things we document during onboarding.
Do we need Business Premium?
Often, but not for everyone. Business Premium includes the device management and security capability that makes the rest of a well-run tenant possible, which is why it suits most office-based staff. Frontline or shared-device roles are frequently better served by a lighter plan. We will size it per role rather than applying one plan across the company.
Not sure how your tenant is configured? Get a tenant review →
Related
Often set up at the same time.
Ready to get started?
Let us look at your tenant.
Whether you are migrating, inheriting a tenant from another provider, or simply unsure how yours is configured, we will give you a straight answer.