We're a small company looking for an MSP to reduce the administrative burden of IT. We have a mixed Windows and macOS environment and already use Microsoft Intune, which we want to keep and have co-managed rather than replaced. Our main needs are endpoint hardening and sensible DLP configuration, getting SSO working correctly after a domain change, and handling role-based onboarding and offboarding. We previously signed with an MSP but ended the agreement after three weeks because project and managed-service costs were not clearly separated. What should we look for when evaluating providers, and where can we find an MSP that will explain its pricing and scope up front?
3 Answers
Look for a provider that already supports co-managed Intune environments and can demonstrate experience with both Windows and Apple endpoints. Have them assess your current enrollment, compliance, identity, and RBAC setup first, then propose a staged pilot. It may also be worth asking whether they can use Microsoft-funded partner or implementation hours, since that can reduce project costs.
DLP should start with a planning exercise, not just turning on policies. Decide which data types and business processes are actually in scope, identify the data owners, and begin with endpoint policies in audit mode. Then tune the rules based on real findings before enforcing anything across Windows and macOS.
Make sure every proposal clearly separates discovery, implementation projects, and recurring managed services. A lot of frustration comes from assuming configuration work is included in the monthly fee when it is actually billed as a separate project. Ask for deliverables, estimated hours, assumptions, and change-order rates before signing a long-term agreement.
Our application and its data are already covered from a security standpoint. The main gap we want help with is endpoint hardening and preventing sensitive data from being mishandled on managed devices.