26 Belden Ave, Norwalk, CT, U.S.A info@ecsgtech.com Mon–Fri 9am–5pm | Sat 9am–2:30pm
ECSG
Get a Demo
Microsoft 365 Tenant · Microsoft CSP

Your Microsoft 365 tenant — the foundation everything is built on

Every user, mailbox, file, license and security setting your company has in Microsoft 365 lives in one place: your tenant. When it's set up right, everything on top of it — email, Teams, SharePoint — is secure and easy to manage. As a Microsoft Cloud Solution Provider (CSP), ECSG licenses, configures, secures and manages your tenant from day one.

Licensing via CSPMicrosoft Defender XDRCustom domainsMigrationsOngoing management
Tenant health · Example
Licenses matched to each roleOptimized
Custom domain verifiedVerified
MFA for every userEnforced
Legacy sign-in methodsBlocked
Defender policies for email & devicesActive
Admin accountsLeast privilege
Microsoft Secure ScoreReviewed monthly
Illustrative example of what we check in every tenant.
What Is a Tenant?

Microsoft owns the building. Your tenant is your floor — and you hold the keys.

A tenant is your company's private space inside Microsoft's cloud. Microsoft keeps the building running and secure. Who gets in, what they can open and how the doors are locked is configured inside your tenant — and that's where most security gaps begin or end.

Identity

Users & groups

Every person, their sign-in, their MFA and the groups they belong to.

Microsoft Entra ID
Data

Mail, files & chats

Mailboxes, SharePoint sites, OneDrives and Teams conversations.

Exchange · SharePoint · Teams
Licensing

Plans & add-ons

Which features each user can use — and what your company pays for.

Through ECSG as CSP
Security

Policies & settings

Sign-in rules, threat protection, sharing settings and admin roles.

Microsoft Defender XDR
Licensing Through ECSG

The right license for every role — on one invoice

As a Microsoft Cloud Solution Provider (CSP), ECSG provides your Microsoft 365 licenses directly. You get one point of contact for licensing and support, and a partner who makes sure you're not paying for more — or protected by less — than you need.

Business planWhat it includesBest for
Microsoft 365 Business BasicEmail on your domain, Teams, SharePoint, OneDrive and the web and mobile versions of Word, Excel and PowerPoint.Teams that work mostly in the browser or on mobile.
Microsoft 365 Business StandardEverything in Basic, plus the desktop apps (Word, Excel, PowerPoint, Outlook) on computers.Office staff who live in the desktop apps.
Microsoft 365 Business PremiumEverything in Standard, plus advanced security: Defender for Business, Defender for Office 365, Intune device management, Conditional Access and information protection.Businesses that handle sensitive data or want the strongest built-in security.
Add-onsMicrosoft 365 Copilot, Teams Phone, extra storage, email-only plans and more.Specific roles and needs.

Microsoft 365 business plans support up to 300 users. Plans and features change over time — we confirm the current options with you before any purchase.

One Invoice

Licensing and support together

Your licenses come through ECSG, alongside the team that manages them.

Why it matters: one call for licenses, setup and support.
Right-Sizing

No unused licenses

We review licenses regularly and remove or reassign the ones nobody uses — especially after departures.

Why it matters: you only pay for active people.
Mixed Plans

Different roles, different plans

Not everyone needs the same license. Office staff, field workers and executives can each get the right plan.

Why it matters: security where it's needed, savings where it's not.
Security Configuration · Microsoft Defender XDR

A secure tenant isn't the default. It's configured.

Microsoft 365 includes powerful security — but much of it has to be turned on and tuned. Microsoft Defender XDR brings together protection for email, devices, identities and cloud apps, and connects related alerts into a single incident. ECSG applies a security baseline to every tenant we manage.

✓

Multi-factor authentication for everyone

A stolen password alone is no longer enough to get in.

✓

Legacy sign-in methods blocked

Old protocols that can't use MFA are shut off — a common way attackers bypass it.

✓

Conditional Access

Sign-in rules based on user, device, location and risk (with Business Premium).

✓

Protected admin accounts

Separate admin accounts, least-privilege roles and extra protection for the keys to the tenant.

✓

Email threat policies

Anti-phishing, impersonation protection, Safe Links and Safe Attachments with Defender for Office 365.

✓

Device protection & management

Defender for Business and Intune policies for company computers and phones (with Business Premium).

✓

External sharing settings

Clear rules for sharing files and inviting guests from outside the company.

✓

Audit logs & Secure Score

Activity logging turned on and Microsoft Secure Score reviewed to track improvement over time.

Built-in plus specialized: Microsoft's built-in protection is the foundation. Where a business needs more, we add specialized layers like Proofpoint for email and SentinelOne for devices — and monitor everything 24/7. See our cybersecurity stack →

Custom Domains

Your name on every email, link and sign-in

Your tenant starts with a technical address like yourcompany.onmicrosoft.com. We connect your own domain so email, Teams and sign-ins all carry your brand — with the DNS records set correctly from the start.

Verification

Prove the domain is yours

We verify your domain in Microsoft 365 and make it the default for every user.

Why it matters: clients see you@yourcompany.com, never a generic address.
DNS Records

Mail flow & authentication

MX, Autodiscover, SPF, DKIM and DMARC configured so email is delivered — and can't be faked.

Why it matters: your email lands in inboxes, not in spam. Learn more
Multiple Domains

Brands, aliases & rebrands

Several domains in one tenant — for different brands, regions or a company name change.

Why it matters: one tenant, every identity your business uses.
Migration

Moving to Microsoft 365 — or to a better-managed tenant

We move email, calendars, contacts and files without losing history and with minimal disruption to your team.

From Google Workspace

Gmail & Drive to Microsoft 365

Mailboxes, calendars, contacts and Drive files moved to Exchange, OneDrive and SharePoint.

From GoDaddy

Taking control of your tenant

Microsoft 365 bought through GoDaddy is moved to direct management under ECSG as your CSP.

Tenant to tenant

Mergers & restructures

Users, mail and files moved between tenants when companies merge, split or rebrand.

From servers

File servers & old email

On-site file shares and legacy email moved into SharePoint, OneDrive and Exchange Online.

1

Assess

Users, mailboxes, data volume, domains and current licenses.

Inventory
2

Prepare

Tenant, licenses and security baseline ready before anyone moves.

Secure from day one
3

Migrate

Email and files copied in stages while your team keeps working.

Staged copy
4

Cut over

Domain records switched outside business hours, with first-day support.

MX switch
5

Clean up

Old accounts closed, licenses right-sized and your team trained.

Optimize
Built on Your Tenant

Everything your team uses runs on this foundation

How it all works together →
Fully Managed by ECSG

What we do for you

  • Licensing: the right plans through ECSG as your Microsoft CSP.
  • Configuration: domains, users, groups and settings done right.
  • Security: our baseline applied and Secure Score tracked over time.
  • Migration: from Google, GoDaddy, another tenant or your servers.
  • Administration: users added and removed through our help desk and onboarding process.
Questions Decision-Makers Ask

Frequently asked questions

What is a Microsoft CSP?

A Cloud Solution Provider is a Microsoft partner authorized to sell and manage Microsoft cloud licenses directly. Buying through ECSG means your licenses, configuration and support come from the same team.

We bought Microsoft 365 elsewhere. Can you take it over?

Yes. We can transfer your licenses and administration to ECSG — including tenants originally set up through GoDaddy — without moving your data out of Microsoft 365.

Isn't Microsoft 365 secure by default?

Microsoft secures its infrastructure, and some protections are on by default. Many important settings — MFA enforcement, Conditional Access, admin protection, email policies, sharing rules — must be configured for your business. That's what our baseline does.

Do we need Business Premium?

Not always. It's the best choice for businesses that handle sensitive information or want advanced built-in security. We often mix plans by role so you get protection where it matters and save where it doesn't.

Will moving to Microsoft 365 interrupt our work?

We migrate in stages and switch your domain outside business hours, so your team keeps working and starts the next day in Microsoft 365 with their history intact.

Microsoft 365 Tenant Review

Is your tenant set up for security — or just set up?

We'll review your licenses, domains, sign-in policies and security settings, then explain in plain language what we'd fix first. No obligation.

Secure. Reliable. Human.

Request a Tenant Review