What we deliver
Our Microsoft 365 Deployment and Management engagement covers design through to ongoing management. The exact scope depends on what your business already has in place and what you need from us, but every engagement includes the elements below.
What Microsoft services do you deliver: M365 setup, Entra ID, Intune, email and Exchange migration, licensing, security?
Full Microsoft 365 and Microsoft Enterprise stack. Tenant deployment for Business Premium and Enterprise (E3, E5, F1, F3). Microsoft Entra ID hardening: Conditional Access policy library, MFA enforcement, Privileged Identity Management (E5 or Entra ID P2), Identity Protection, passwordless authentication via Microsoft Authenticator and FIDO2, self-service password reset.
Microsoft Intune endpoint management across Windows, macOS, iOS, iPadOS and Android. Windows Autopilot, Apple Business Manager Automated Device Enrolment, Android Enterprise. Email and tenant migration from Google Workspace, hosted cPanel, on-premises Exchange and other Microsoft 365 tenants. SharePoint Online, OneDrive for Business and Microsoft Teams configuration with governance.
Microsoft Defender stack: Defender for Business, Defender for Endpoint Plan 1 and Plan 2, Defender for Office 365 Plan 1 and Plan 2, Defender for Identity, Defender for Cloud Apps, Defender XDR. Microsoft Purview: sensitivity labels, Data Loss Prevention (endpoint, Exchange, SharePoint, OneDrive, Teams), retention policies, eDiscovery Standard and Premium, Audit Premium, Insider Risk Management, Communication Compliance and Compliance Manager.
Exchange Online Protection plus SPF, DKIM, DMARC and MTA-STS. Teams Phone, Audio Conferencing, Operator Connect and Teams Premium. Microsoft 365 Copilot deployment with sensitivity label honouring. Windows 11 Enterprise (E3 and E5). Microsoft Cloud PKI managed certificate authority. Apple Business Manager and Android Enterprise integration sit alongside the Microsoft surface for organisations that mix Apple, Windows and Android devices in the same fleet.
Are you a Microsoft partner or hold Microsoft accreditation?
Yes. ZA Support is a Microsoft Partner. Current Solutions Partner designations are confirmed and the corresponding badges placed on the website: Solutions Partner for Modern Work, Solutions Partner for Security, Solutions Partner for Business Applications, Solutions Partner for Infrastructure (Azure) and Solutions Partner for Data and AI. Microsoft Cloud Partner Program tier verified annually. Microsoft 365 Cloud Solution Provider (CSP) for direct licensing. Microsoft Certified Trainer status for in-house training delivery.
Why ZA Support
We have operated as an Apple repair and IT specialist from Hyde Park since 2009. Over 17 years we have built a 4.9-star reputation across 633 Google reviews and hold BEE Level 1 certification. We are an Apple Authorised IT Specialist, a Microsoft Cloud Solution Provider and a Ubiquiti partner with over 1,100 UniFi installations since 2014. We work with consumer customers, SMBs, corporates and medical practices across Gauteng, with most of our business coming from referrals.
Apple-first Microsoft
Apple Authorised IT Specialist and Microsoft Partner under one roof — Mac, iPhone and iPad treated as primary platforms, not afterthoughts.
17 years in practice
Hyde Park workshop since 2009, 4.9 stars across 633 Google reviews, BEE Level 1, most engagements arriving by referral.
Direct partner relationships
Microsoft Cloud Solution Provider, Apple Authorised IT Specialist and Ubiquiti partner — licensing, procurement and escalation paths held directly.
What we have learned from doing this at scale
Do you handle Microsoft 365 specifically on Apple devices (Macs and iPhones in a business)?
Yes, and this is the single biggest differentiator for ZA Support in the Microsoft 365 market. Most South African Microsoft partners are Windows-first and treat Mac and iPhone as second-class. ZA Support is Apple Authorised IT Specialist plus Microsoft Partner and deploys the full Microsoft 365 stack with Apple as the primary platform.
On Mac (macOS Sonoma, Sequoia, Tahoe): Microsoft 365 Apps for Mac, new Outlook for Mac with Exchange Online, Microsoft Teams for Mac, OneDrive sync client with Files On Demand and Known Folder Move, Microsoft Defender for Endpoint on Mac (antivirus, EDR, web protection, network protection) and Microsoft Intune via Apple Business Manager and Automated Device Enrolment for zero-touch onboarding.
Configuration profiles for Wi-Fi, certificates, FileVault encryption with recovery key escrow, firewall and system extensions. Platform SSO with the Microsoft Enterprise SSO extension — native Entra ID sign-in at the macOS login window from Ventura onwards. Compliance policies covering FileVault, password, System Integrity Protection, Gatekeeper and OS version, with Conditional Access enforcement. Microsoft Edge enterprise policy and Microsoft Cloud PKI Wi-Fi and VPN certificates.
On iPhone and iPad: the full Microsoft 365 app suite, Microsoft Authenticator, Intune supervised enrolment via Apple Business Manager, App Protection Policies for BYOD without device enrolment, Microsoft Defender for Endpoint mobile and the Microsoft Enterprise SSO plug-in for single sign-on across Microsoft 365 apps — the same Entra ID identity, Conditional Access and Defender protection a Mac or Windows endpoint enjoys, on the phone in the user's pocket.
Is Microsoft work part of managed services, or standalone projects, or both?
Both. Standalone project work covers tenant setup, mailbox and file migration, Intune rollout, Apple Business Manager linkage, Conditional Access design, Microsoft Entra ID hardening, Defender deployment, Microsoft Purview compliance baselining, Teams Phone cutover, licence audit and rationalisation, mergers and acquisitions cross-tenant migration, Windows Autopilot enablement and compliance assessment against POPIA, HPCSA, FAIS and ISO 27001 in Compliance Manager.
Managed services cover the user lifecycle (joiner, mover, leaver) with account creation, licensing, group membership, device provisioning, mailbox conversion, OneDrive transfer and licence reclaim. Device enrolment and decommissioning as the fleet turns over. Patch and update management across Mac, iPhone, iPad and Windows. Defender alert triage and incident response. Conditional Access tuning. Quarantine release, phishing report investigation and user-reported submission handling. Licence optimisation reviews. Compliance posture maintenance. Backup verification and restore testing. Monthly reporting on security posture, incidents, adoption and licence spend. A service desk for end-user Microsoft 365 questions. Annual security review and configuration drift audit. Most engagements start as a standalone project and convert to managed services after handover.
Our approach
Every engagement follows a four-step approach. The first step is always a discovery call to understand what you have, what is working and where the gaps are. The second is a written scope and quote so you know exactly what the engagement covers and what it costs before anything starts. The third is the work itself, with weekly checkpoints for anything longer than a single visit. The fourth is handover and the option of an ongoing managed service if you want one.
The discovery call is free and there is no obligation. We use it to understand the current state of your environment, what your business needs from the engagement, what your timeline looks like and what your budget envelope is. If we are not the right partner for the work, we tell you that during or immediately after the call and we point you toward someone who is. We do not waste your time, and we do not waste ours, by chasing engagements that are a poor fit.
Pricing
Microsoft 365 Deployment and Management engagements start from R 12,500 excluding VAT. The final quote depends on the scope, the number of users or devices and whether you want a one-off project or an ongoing managed service. We confirm pricing in writing after the discovery call, and we do not start work without a signed quote.
Where the engagement is best structured as a fixed-price project, we quote it that way. Where it is better structured as a monthly managed service — most ongoing IT support, security monitoring and licence management — we quote it on a per-user or per-device basis with a written service level. Where it is genuinely time-and-materials work (recovery from an incident, complex migration with unknown scope), we are honest about that and we keep you informed of accruing time so there are no surprises.
Indicative pricing only. Final pricing is confirmed in writing after a discovery call and a written scope. Call 064 529 5863 to book yours.
Who we work with
Do you do email and tenant migrations for businesses?
Yes. This is one of the most common standalone projects. Migrations into Microsoft 365: Google Workspace (Gmail, Calendar, Drive, Shared Drives, Contacts), hosted cPanel email (Host4Africa, Afrihost, Webafrica, Domains.co.za, MWEB, RSAWeb), Exchange on-premises (cutover for under 2,000 mailboxes, staged for larger, hybrid for long-term coexistence), IMAP from any standards-compliant mail server, Apple iCloud Mail to Exchange Online (businesses formalising from personal Apple IDs onto a proper business tenant), Zimbra, Zoho Mail, Rackspace, GoDaddy and Fastmail.
Cross-tenant Microsoft 365 migrations: mergers and acquisitions, divestitures and rebrands. SharePoint Online and OneDrive migration from file servers, Dropbox, Box and Google Drive. Microsoft Teams content migration. Specialist scenarios: medical practices migrating to HPCSA-aware tenants with POPIA-aligned Purview labels, financial services firms with FAIS and FICA retention requirements, legal firms with attorney-client privilege protection and litigation hold preservation, and tenants where the original administrator has left and credentials are unavailable.
Project scope: pre-migration discovery, DNS planning (MX, SPF, DKIM, DMARC, Autodiscover, MTA-STS), tenant provisioning, licence procurement, pilot migration, full migration in batches, DNS cutover with rollback plan, Outlook profile reconfiguration on every Mac and Windows desktop, mobile device reconfiguration with Intune App Protection Policies, shared mailbox and distribution-list rebuild and a documented handover so the business owns its own tenant from day one.
Related services
This page is part of our business services suite. Related pages cover our other specialist areas — UniFi networking, Adobe Creative Cloud support, Apple device management, Architecture and CAD IT, and Creative and Media Production IT. We commonly engage across multiple areas for a single customer, and where we do the engagements are coordinated under a single account manager.
All business services
SLA-backed Apple and Microsoft IT for businesses across Gauteng.
Managed IT services
Monthly proactive management with security monitoring and licence control.
Apple device management
Central configuration and security across the Apple fleet via MDM.
UniFi networking
Specialist UniFi design, installation and ongoing management — over 1,100 sites since 2014.
Medical practice IT
POPIA-aware, HPCSA-context managed IT for doctors and practices.
Recent guidance
Our blog publishes regular Microsoft 365, Intune, Entra ID and Apple-on-M365 guidance.
The questions we hear most often from prospective customers are below. If yours is not here, the fastest way to get an answer is to call us on 064 529 5863 or email courtney@zasupport.com.
Frequently asked questions
Book a discovery call
A discovery call is free and takes about thirty minutes. We use the call to understand what you have, what you need and whether we are the right partner. If we are, we follow the call with a written scope and quote within three working days. If we are not, we will tell you that directly and point you toward someone who is. Call us on 064 529 5863 or email courtney@zasupport.com to book.