Securing and managing Microsoft 365: the modern workplace that grows with you.
The modern workplace is everywhere: at the office, at home, on the road and at the customer. Qteco builds it on Microsoft 365, Teams, Intune and Entra ID, with MFA, Conditional Access and central device management as the foundation. New employees are operational the same day, devices are managed centrally, access is securely arranged and support is close by.
Most attacks on SMEs start with an identity or an e-mail in Microsoft 365. That is why security at Qteco is not next to the workplace but inside it: the licences, the management and the security are one fixed fee per workplace per month, managed by the team that also knows your network and servers.
One workplace. Fully set up, secured and managed.
From applications and devices to identity and access: we handle the complete workplace as one coherent whole, managed by the team that also knows your IT.
Microsoft 365 and Teams
A fully configured Microsoft 365 environment with Word, Excel, Outlook, SharePoint and Teams as the central work environment: chat, calls, meetings and working together on documents. Available everywhere, always up to date, licences included and centrally managed.
MFA and Conditional Access
Multi-factor authentication on every account, phishing-resistant with passkeys for administrators and finance roles, and access policy based on device, location and risk. Legacy authentication off, so old protocols do not form a back door. Secure, without getting in the way of the workplace.
Intune device management
Laptops, desktops and phones centrally deployed, encrypted, secured and managed through Microsoft Intune. Policy and updates fully automated, a lost device wiped remotely, and a new laptop that configures itself as soon as the employee signs in.
Identity management with Entra ID
One secured identity per employee with Microsoft Entra ID and single sign-on for all your applications. Rights and roles managed centrally on a least-privilege basis, from onboarding to departure, with periodic reviews of who may access what.
Defender, e-mail security and backup
EDR protection (Microsoft Defender) on every device, AI-driven filtering of phishing and malicious attachments, and a daily independent backup of mail, OneDrive, SharePoint and Teams on Dutch infrastructure. Standard in every package.
Onboarding, offboarding and support
New employees are operational the same day; departing employees are phased out through a fixed, verifiable process, with access revoked immediately. After that, one servicedesk that knows your environment, with an average response time of around 14 minutes.
SMS, Authenticator app or passkey: the difference.
All three are better than a password alone. But modern phishing intercepts codes live through a fake login page (adversary in the middle). Only a passkey or hardware key withstands that, because it only works on the genuine website.
From blank to productive in four steps.
We do not build your workplace in one go over the fence, but in clear phases, so you always know where you stand and nothing is overlooked.
Inventory and security check
We map devices, applications, licences and ways of working and test your current Microsoft 365 environment on the six points of the security check: MFA, Conditional Access, connections, EDR, backup and awareness.
Set-up and security
Microsoft 365, Intune and Entra ID are configured with MFA, Conditional Access, Defender and backup as the foundation, and unused licences disappear.
Rollout and migration
Devices and users are moved over in a controlled way, without unnecessary downtime and outside office hours where needed. Everyone transitions smoothly.
Management and support
After that we take over continuous management: monitoring, updates, onboarding, licence management and support with short lines.
Frequently asked questions about Microsoft 365 and the modern workplace.
How do I secure Microsoft 365 for my company?
In this order: MFA for all users, legacy authentication off, Conditional Access that only allows managed devices, Defender (EDR) on every device, e-mail security against phishing, an independent backup of Microsoft 365 and a short awareness training. Qteco’s free security check tests exactly these points in two minutes.
What is Conditional Access and do I need it?
Conditional Access is the access policy of Microsoft Entra ID: for every sign-in it checks who is signing in, from which device, from which location and with which risk, and based on that grants access, asks for MFA or blocks. Yes, you need it: without Conditional Access, MFA only works if a user happens to have it enabled. It is included in Microsoft 365 Business Premium.
What are passkeys and are they safer than MFA via SMS?
A passkey is a cryptographic key on your phone or laptop, unlocked with fingerprint, face or PIN, that only works on the genuine website. SMS codes can be intercepted and relayed; a passkey cannot. So yes: passkeys are phishing-resistant and SMS is not. Qteco uses passkeys as standard for administrators and finance roles and then rolls them out to everyone.
What is the difference between Microsoft 365 Business Premium and E3?
Business Premium is meant for organisations of up to 300 users and includes, next to the Office apps, Intune, Entra ID P1 with Conditional Access, Defender for Business (EDR) and Defender for Office 365 against phishing. E3 has no user limit and more compliance and Windows Enterprise features, but lacks Defender for Business and Defender for Office 365; those require E5 or separate add-ons. For SMEs, Business Premium is almost always the better and cheaper choice.
What is a modern workplace and what does it cost per employee per month?
A modern workplace is a managed Microsoft 365 environment in which employees work securely on any device and from any place. At Qteco it costs from around € 89 per workplace per month (Startup, up to around 20 employees) or from around € 119 (Growth, up to around 40), all-in: Microsoft 365 licences, Intune, MFA, EDR, backup, management and support. Excluding onboarding, hardware and VAT.
Is Microsoft Defender for Business enough for an SME?
As the EDR layer on the devices: yes, provided it is configured properly and someone looks at the alerts. Defender for Business detects and isolates, but does not assess and does not call you at 03:00 at night. That is why Qteco combines Defender with management, e-mail security, backup and, from the Growth package, 24/7 SOC monitoring that assesses the alerts and intervenes.
Part of one coherent ecosystem.
The modern workplace does not stand alone. These services connect to it seamlessly, managed by the same team.
Background in the news: phishing keeps getting smarter: Microsoft and Google abused.
Ready for a workplace that grows securely?
First take the free Microsoft 365 security check to see where you stand, or book a no-obligation call with an engineer right away.