Business User Pack Onboarding
Bring users, computers, Microsoft 365, security, backup and support under one managed service through a planned onboarding process designed to minimise disruption.
Good Onboarding Starts with Understanding What You Already Have
Moving to a managed IT service should not begin with changing everything at once.
KES starts by reviewing your users, computers, Microsoft 365 environment, existing security tools, backups and support arrangements. This allows us to plan the transition properly, identify gaps and avoid unnecessary disruption.
The aim is to bring each user and device under consistent management while preserving the systems and working practices that remain suitable for the business.
From Initial Review to Fully Managed Service
1. Discovery and Planning
We confirm the number of users, computers, Microsoft licences, mailboxes, domains, applications and existing support arrangements.
2. Microsoft 365 Review
We review the current tenant, licensing, accounts, access, security settings and data-protection requirements.
3. Device Assessment
Computers are checked for suitability, supported Windows versions, encryption readiness and any existing management or security software.
4. Security Deployment
Agreed endpoint protection, monitoring, email security and identity controls are deployed and validated.
5. Backup Activation
Microsoft 365 backup and endpoint user-profile backup are configured and checked for successful protection.
6. Handover and Support
Users are advised how to contact KES, support arrangements are confirmed and the managed service moves into normal operation.
Making Sure Every User Has the Right Services
We review each named user, their role, Microsoft 365 licence, mailbox and device requirements.
Microsoft 365 Business Premium is the standard licence within the Business User Pack because it provides the productivity, identity and device-management capabilities required for the complete service.
Where a user has a genuinely different requirement, an alternative licence can be considered and approved individually.
The user review includes:
- Named users and job roles
- Microsoft 365 licence requirements
- User and shared mailboxes
- Distribution groups and permissions
- Multifactor authentication
- Starters, leavers and dormant accounts
Bringing Business Computers Under Consistent Management
Remote Management
The KES management agent is installed so computers can be monitored, maintained and supported remotely.
Endpoint Security
Antivirus, endpoint detection and response, ransomware detection and tamper protection are deployed.
Device Compliance
Supported computers are enrolled into Microsoft Intune and checked against the KES security baseline.
BitLocker Encryption
Compatible Windows computers are encrypted and recovery information is stored centrally.
Patch Management
Windows updates are brought under the standard KES approval, deployment and monitoring schedule.
Endpoint Backup
Agreed user-profile locations are configured for backup on each included computer.
Protecting More Than the Computer
The onboarding process also brings the customer’s Microsoft 365 environment under backup, email protection and activity monitoring.
Microsoft 365 Backup
Supported Exchange Online, OneDrive, SharePoint and Teams data is added to independent backup with Infinite retention.
Managed Email Security
User and shared mailboxes are added to the managed email-security service, including visible message guidance and incident review.
Activity Monitoring
Microsoft 365 sign-ins, account changes, mailbox activity and unusual file events are brought into the monitoring platform.
Dark Web Monitoring
Agreed company domains are configured for monitoring against known breach and credential-exposure data.
Security Awareness
Users can be added to cybersecurity training and phishing-simulation campaigns.
Tenant Security Review
Microsoft 365 configuration recommendations are reviewed and prioritised according to the customer’s needs and licensing.
Backup Is Not Complete Until Protection Has Been Checked
Adding a licence or installing an agent does not automatically prove that data is protected.
During onboarding, KES checks that Microsoft 365 workloads are authorised, users have available backup seats and the first successful backup jobs have completed.
Endpoint backup is also checked to confirm that the agreed user-profile folders are included and backup activity is reporting correctly.
Backup onboarding checks include:
- Correct customer tenant connected
- Required users protected
- Licence capacity available
- Microsoft 365 workloads authorised
- Initial backup success confirmed
- Endpoint backup scope verified
A Planned Handover Reduces Disruption and Missing Information
Where another IT provider is involved, KES will request the technical and administrative information needed to take over the service safely.
Administrative Access
Microsoft 365, domain, firewall, backup and other relevant administrative access must be transferred securely.
Existing Documentation
Available network, licensing, supplier, device and system information is reviewed and incorporated into KES documentation.
Removal of Old Tools
Previous management, security and backup agents are removed or replaced in a controlled sequence where appropriate.
The speed of the handover depends partly on the quality of the information and cooperation provided by the outgoing supplier.
Successful Onboarding Requires Timely Information and Access
Accurate User Information
Names, roles, email addresses, devices and licensing requirements should be confirmed before deployment.
Device Availability
Computers must be switched on, connected and available for installation, testing and restarts where required.
Administrative Cooperation
The customer and outgoing provider must supply the access, approvals and information required to complete the transition.
Application Information
Line-of-business applications, specialist suppliers and unusual device requirements must be identified.
User Communication
Staff should be informed about planned changes, support arrangements and any actions they need to complete.
Prompt Decisions
Customer-specific exceptions, purchases and licensing decisions should be approved promptly to avoid delays.
Users, Devices and Services Move into Normal Managed Operation
Support Access Confirmed
Users know how to contact KES and the customer understands the pooled support arrangement.
Core Protection Active
Endpoint security, email protection, backup and monitoring are active and reporting.
Outstanding Actions Recorded
Any unsupported equipment, customer decisions, future projects or configuration improvements are documented.
See What Happens After Onboarding
Microsoft 365 Business Premium
Managed licensing, productivity tools, identity protection and device-management capabilities.
Learn more →Managed Device Security
Encryption, patching, compliance and management for included computers.
Learn more →Included IT Support
Pooled remote support and routine administration for users and systems.
Learn more →Microsoft 365 Monitoring
Monitoring of sign-ins, changes, file activity and Microsoft 365 security events.
Learn more →Microsoft 365 Backup
Independent backup and recovery for supported Microsoft 365 data.
Learn more →Business User Pack
See the complete managed service, pricing and user entitlement.
View the complete package →Considering a Change of IT Provider?
We can review your current environment, identify what information will be needed and show you how the Business User Pack can be introduced without unnecessary disruption.
Business User Pack Onboarding FAQs
How long does Business User Pack onboarding take?
It depends on the number of users, computers, sites, applications and the quality of information available. KES agrees a practical onboarding plan before deployment begins.
Do we need to replace all our current systems?
No. KES reviews the existing setup and retains suitable systems where practical. Changes are made where they are necessary to deliver the agreed service securely.
Can onboarding be completed remotely?
Much of the work can usually be completed remotely. Onsite work may be required where physical installation, network work or hands-on device access is necessary.
What happens to our existing Microsoft 365 tenant?
KES normally reviews and manages the existing tenant rather than creating a replacement unnecessarily.
What information is needed from our existing IT provider?
This may include Microsoft 365 access, domain and DNS details, firewall credentials, backup information, licensing records, network documentation and specialist supplier contacts.
Are all onboarding costs included in the monthly price?
Standard provisioning of the agreed Business User Pack services is included. Hardware, onsite attendance, migrations, major remediation and customer-specific project work may be quoted separately.
When does monthly billing begin?
The commencement date is agreed as part of the service order and onboarding plan.