A security concept for Microsoft 365: time-limited admin rights, access rules and managed devices
An engineering firm secures Microsoft 365 with an up-to-date security concept, without slowing staff down day to day.
- Client
- Engineering firm
- Industry
- Engineering, Hamburg
- Period
- since September 2026, ongoing
Starting point
Microsoft 365 had been in use at the firm for years and had grown step by step over that period, without the security architecture ever having been planned as a whole. The management wanted to be able to answer the question “are we adequately protected?” with evidence, without making the engineers’ work more complicated.
Solution
After a review of licences and configuration, I drew up a security concept that brings the available features together: Privileged Identity Management, so administrator rights are only activated for the duration of a task. Conditional Access, so access is tied to user, device and location. Permission groups with a clear logic, and Intune for central device management. I am rolling it out step by step, with test and pilot groups before each wider rollout, so no new rule slows the engineers down unexpectedly in their daily work.
Outcome
The firm gets a Microsoft 365 environment in which rights, access and devices follow rules you can follow, and where security can be evidenced. The project is under way.
IT for a medical practice: email with built-in protection, new practice software and a stable network
A specialist medical practice renews its practice IT. Email with built-in protection, new practice software and a stable network, while work carries on.
An office move with no handover: inventory, network rebuild and documentation
An agency is changing IT provider, and the office move follows shortly afterwards. No handover, no documentation, a fixed date.
IT that had grown over the years, rebuilt from scratch: servers, network, security and telephony as one piece
An urban development practice replaces IT that grew over time with a segmented, monitored, documented environment. IT modernisation in phases, during operation.