Microsoft 365 Business Premium

Our mainstay product offering, Business Premium bundles an array of security options and packages that will streamline your business. With the help of our managed services, you will be able to:

• Connect to Microsoft Entra ID to get cloud-based logons for your devices, instead of depending on servers and VPNs.
• Limit file copying from company Sharepoint locations with Azure Information Protection.
• Configure new devices or roll out a standard configuration to your IT estate, with Windows AutoPilot.
• Forcibly encrypt laptop disks, mobile devices and back up their encryption keys without third-party software.
• Enable remote wipe facilities for laptops, desktops and mobile devices in the event of loss or suspected compromise.
• Activate Microsoft 365 Exchange Protection options such as anti-phishing and security email alerts.
• Centralise archiving of emails, allowing restrictions of deletion of emails if required, or appointed senior staff to access archives.
• Encrypt files and emails with Microsoft Azure Information Protection
• Integration with Azure Virtual Desktop, with built in usage-rights.

Microsoft SharePoint

Sharepoint enables you to store, organise, share and access information from any device; upload files to SharePoint document libraries and access anywhere, or work collaboratively with your team on the same document.

Microsoft InTune

 Microsoft InTune is a cloud-based solution offering comprehensive endpoint security and management for your organisation’s mobile devices and applications. Over the years, this application has moved from strength to strength in terms of centralised management and security. Since 2018 Stem Systems have taken an “InTune first” approach to the management of our customer endpoints where applicable. As the world moves away from on-premise domain controllers for managing devices, we have seen substantial benefits to our device management processes at scale. We can centrally and silently apply new security policies, application settings and scripts to our customers regardless of where their users are located.

InTune empowers businesses to:

• Managing desktops, laptops and mobile phones without third-party remote tools and licences.
• Retain control over devices whilst disconnected from your office network.
• Allow users to sign in with Microsoft 365 credentials and seamlessly install pre-approved applications; forcibly encrypt the disk; sync SharePoint and OneDrive content; and run custom Powershell Scripts. The user requires no interaction beyond the password stage.
• View status of managed devices and remotely deploy new applications, security policies etc.
• Prevent copying of confidential data to personal apps.
• Run your work apps in a sandboxed environment on a staff member’s personal phone. Staff will have the option of separate work WhatsApp, web browsers and more, without affecting personal content.