Microsoft 365: Technical Hygiene and License Optimisation

For many UK businesses, Microsoft 365 has become the invisible engine of the office. It is so ubiquitous that we often take its setup for granted, yet behind the scenes, many organisations are leaking money on redundant licences or leaving digital backdoors wide open. At Jibba Jabba, we frequently encounter environments that were set up quickly and never refined, leading to 'licence bloat' and security gaps that could easily be closed with a more technical, disciplined approach to tenant hygiene.

The Art of M365 Licence Management

One of the most common inefficiencies we see in South Yorkshire businesses is a lack of oversight regarding licence allocation. It is remarkably easy to continue paying for Business Premium or E5 seats for employees who left the company months ago, or to over-spec a user who only needs basic email access.

Conducting a Licence Audit

Start by auditing your active users against your payroll. In the Microsoft 365 Admin Center, look for 'Unassigned Licences'. If you are paying for seats that aren't assigned, you are simply gifting money to Microsoft. Furthermore, consider the Shared Mailbox strategy. Many businesses pay for a full licence for info@ or sales@ addresses. In most cases, these can be converted to Shared Mailboxes, which are free and do not require a licence, provided they are under 50GB and accessed by a licensed user.

Hardening the Perimeter with Entra ID Conditional Access

Identity is the new perimeter. With the rise of hybrid working across the UK, traditional firewalls are no longer enough. This is where Microsoft Entra ID (formerly Azure AD) and Conditional Access policies become critical. Think of Conditional Access as an 'if-then' statement for your security.

Implementing Zero-Trust Policies

A standard recommendation we make is to implement a policy that requires Multi-Factor Authentication (MFA) not just 'always', but based on risk signals. For example, you can create a policy that allows seamless login from your Doncaster office's known IP address but triggers a secondary hardware token or authenticator app request if a login attempt originates from a different country or an unmanaged device. By restricting access to only UK-based IP addresses (unless you have international travellers), you can eliminate a massive percentage of automated brute-force attacks.

Optimising SharePoint for Compliance and Speed

SharePoint is often used as a 'dumping ground' for files, leading to a cluttered environment that makes finding data difficult and increases the risk of accidental data exposure. Proper SharePoint hygiene is essential for both productivity and GDPR compliance.

Hub Sites and Permissions

Instead of one massive 'Company Data' site, we recommend using Hub Sites. This allows you to aggregate related sites (e.g., Marketing, Finance, HR) while maintaining distinct permission sets. A common mistake is using 'Broken Inheritance' on folders within a site, which makes auditing permissions a nightmare. Instead, keep permissions at the site level. If a group of people needs different access, give them a different site. This keeps your data map clean and ensures that when a staff member leaves, their access is revoked cleanly across the board.

Email Security: Beyond the Basics with Defender

Email remains the primary vector for cyber-attacks in the UK. While basic spam filtering is included, leveraging Microsoft Defender for Office 365 provides the advanced protection required in 2024. We focus on two key features: Safe Attachments and Safe Links.

• Safe Attachments: This uses a 'sandboxing' technique where every attachment is opened in a secure, isolated environment to check for malicious behaviour before it ever reaches your inbox.
• Safe Links: This provides time-of-click verification of URLs in emails. Even if a link was safe when the email was sent, if the destination website is compromised an hour later, Defender will block the user from visiting it.

Streamlining Workflows with Power Automate

Technical optimisation isn't just about security; it's about reclaiming time. Power Automate allows you to connect M365 apps to automate repetitive tasks without writing a single line of code. For example, we often help clients set up a flow where any email attachment from a specific 'Invoices' folder is automatically saved to a specific SharePoint directory and a notification is sent to the Accounts Team via Microsoft Teams.

Actionable Tip: Start small. Identify one task that takes an employee 15 minutes every day. Automating that single task saves over 60 hours of manual labour per year.

How Jibba Jabba Can Help

Managing a Microsoft 365 tenant is a continuous process, not a one-time setup. At Jibba Jabba, we act as an extension of your team, ensuring your licences are optimised for cost, your SharePoint is structured for growth, and your security settings are aligned with UK best practices. Whether you are looking to migrate to the cloud or need a professional audit of your existing environment, we provide the technical expertise to ensure your IT infrastructure supports your business goals without unnecessary overhead.