> email
"Our email is still on GoDaddy or Google."
You're paying a reseller markup, can't reach half the admin settings, and don't fully own your own tenant.
100% remote · Microsoft 365 for small business
Your Microsoft 365 project, done right the first time.
Email migrations, Intune and Autopilot, security hardening, and Teams Phone, handled by a senior engineer with 20+ years in MSP and enterprise IT. Scoped up front, quoted at a fixed price, and delivered entirely remotely.
- Fixed-price quotes
- Written documentation at handoff
- No retainers, no lock-in
// Sound familiar?
Most small businesses call me for one of these.
> devices
"Nobody really manages our laptops."
New hires wait days for a working PC, updates are hit-or-miss, and a lost laptop means a lost laptop's worth of data.
> security
"We pay for Business Premium but don't use it."
MFA isn't enforced for everyone, Conditional Access was never set up, and nobody has looked at Defender since the trial.
> phones
"Our phone system is older than some employees."
A legacy hosted PBX with a separate bill, when Teams Phone could ring the same laptop everyone already uses.
> insurance
"Our cyber insurance renewal asked questions we couldn't answer."
MFA everywhere, endpoint protection, admin separation. I'll get you to real "yes" answers, with the documentation to prove them.
> handoff
"The last IT person left nothing written down."
Every project ends with documentation your team, or your next IT provider, can actually use.
// Project packages
Clear scope. Fixed price. Fully remote.
Every project is quoted after a scoping session, so you know the full cost before any work starts. Starting prices below cover a typical small business; your quote reflects your actual environment.
Most requested
Email migration to Microsoft 365
Move off GoDaddy-hosted 365, Google Workspace, IMAP, or on-prem Exchange into a Microsoft 365 tenant you own outright.
- Mailboxes, calendars, contacts, and shared mailboxes
- A planned MX cutover, so no mail is lost in transit
- SPF, DKIM, and DMARC set up correctly
- User instructions and day-one support after cutover
Starting at$4,000
Microsoft 365 security hardening
Make full use of the security you're already paying for, and have it documented for your insurer or auditor.
- MFA for everyone and Conditional Access policies
- Defender for Office 365 and Defender for Business
- Admin account separation and legacy-auth shutdown
- Before-and-after Secure Score with a written report
- Optional add-on: FortiGate firewall hardening
Starting at$5,000
Intune & Autopilot foundation
New laptops ship straight to employees and set themselves up. Every device is patched, encrypted, and compliant.
- Autopilot zero-touch enrollment
- Compliance policies, BitLocker, and security baselines
- App deployment and Windows Update rings
- Enrollment of your existing devices
Starting at$6,000
Teams Phone migration
Replace a legacy hosted phone system with Teams Phone, and keep your existing numbers.
- Number porting and cutover planning
- Auto attendants, call queues, and business hours
- Licensing and calling-plan guidance
- Desk phone and headset recommendations
Starting at$5,000
Best value
Microsoft 365 Modernization
Modernize your Microsoft 365 environment in one coordinated project—from migration and security hardening to device management. One strategy, one seamless cutover, and one engineer who understands your entire environment—at a lower cost than tackling each project separately.
PricingQuoted per project
Also available: FortiGate firewall hardening, tenant-to-tenant moves, SharePoint migrations, licensing clean-ups, and other Microsoft 365, Entra ID, Azure, or Defender work. Mention it on the free call.
// How it works
From first call to handoff.
01Free
Fit call
15 minutes on Teams. You tell me what's going on; I tell you honestly whether I'm the right person for it.
02$200
Scoping session
A deeper working session on your environment. You get a written plan and a fixed-price quote within a few business days.
03
The project
Approve the quote online, pay the deposit, and we schedule the work. You get regular updates and nothing changes without your OK.
04
Handoff
Written documentation, admin walkthrough, and a follow-up check-in. Your team owns everything from here.
// The scoping session
Know exactly what it costs before you commit.
The scoping session is where the project gets defined. You fill out a short pre-call questionnaire, then we spend up to 90 minutes going through your tenant, your devices, and your goals together.
- A written project plan: what gets done, in what order, and why.
- A fixed-price quote you can approve online.
- Quick wins and risks I spot along the way, whether or not you hire me.
// Investment
$200 / one session
Credited in full toward your project if you move forward within 30 days.
Start with a free call
Scoping sessions are scheduled after the free fit call, so you only pay once we both know it's a good match.
// Recent work
Projects like yours.
A few recent engagements, shared with client permission and anonymized where requested.
Microsoft 365 security hardening
[industry] business with [N] users. [Starting problem: e.g. what prompted the call]. [What was done, 1–2 sentences].
- Result
- [Secure Score before → after]
- Timeline
- [weeks]
Fonality to Teams Phone migration
[industry] business with [N] users and [N] numbers moved off a legacy Fonality system onto Teams Phone. [Auto attendants / queues / cutover details].
- Result
- [downtime / monthly savings]
- Timeline
- [weeks]
FortiGate firewall hardening
[industry] business. [Starting state: e.g. default config, open rules]. [What was done: firmware, admin access, rules review, VPN/MFA].
- Result
- [e.g. rules reduced, findings closed]
- Timeline
- [weeks]
// Remote by design
No travel fees. No waiting for a site visit.
Microsoft 365 projects happen in the cloud, and so does all of my work. I don't do on-site visits. When something physical needs doing, like plugging in a desk phone or unboxing a laptop, someone on your team handles it with clear instructions from me.
- Access through a named, MFA-protected admin account, removed when we're done
- Changes scheduled after hours when they affect users
- Status updates by email or Teams, whichever you prefer
// Who you'll work with
Hi, I'm Chris.
Senior Engineer · 20+ years in MSP & enterprise IT
I've spent my career in MSP and consulting environments, leading Intune rollouts, cloud migrations, and security projects for businesses of every size. You work with me directly from the first call to the handoff. Nothing gets passed to a junior tech. I also write The Runbook Blog, so you can read how I work before you ever talk to me.
// Book a free call
Start with 15 minutes.
Pick a time that works for you. Tell me a little about your business and what you're trying to get done, and I'll come prepared. The call is on Microsoft Teams and there's no obligation.
- A calendar invite and Teams link arrive by email right away
- Reschedule or cancel anytime from that email
- Prefer email? Write to hello@therunbookblog.com
// Questions
Frequently asked.
Do you ever come on-site?
No, all of my work is remote. Microsoft 365, Intune, Entra ID, and Teams Phone are cloud services, so there's nothing a site visit would add except travel costs. For anything physical, someone on your team follows step-by-step instructions from me. With Autopilot, new laptops set themselves up once they're unboxed and connected.
Can firewall work really be done remotely?
Yes, with the right precautions. Changes happen in a scheduled maintenance window, the configuration is backed up first, and changes are staged so a mistake can be rolled back. The only thing I ask is that someone can reach the firewall to power-cycle it if needed.
What size businesses do you work with?
Typically small businesses with roughly 5 to 150 people, often ones without a full-time IT department, or with one IT person who needs senior help for a specific project.
Is the free call a sales pitch?
No. It's 15 minutes to understand what you need and tell you honestly whether I'm a good fit. If I'm not, I'll say so, and I'll often point you to a free runbook or tell you what to look for in someone else.
How does the $200 credit work?
If you approve a project within 30 days of your scoping session, the full $200 comes off your project invoice. If you decide not to move forward, you keep the written plan and can use it however you like, including with another provider.
Why fixed prices instead of hourly?
Because you should know the cost before work starts. The scoping session gives me enough detail to quote accurately. If you ask for something outside the agreed scope, I'll quote it and wait for your approval before doing it. You'll never get a surprise bill.
How do you access our systems securely?
You create a named admin account for me, protected by MFA and scoped to what the project needs, or grant time-limited delegated access. I never ask for anyone's personal password, and all of my access is removed at the end of the project.
How does payment work?
Invoices are sent through Stripe and can be paid online by card or bank transfer. Projects typically start with a 50% deposit, with the balance due at handoff. Larger projects are split into milestones.
What happens after the project is done?
You get full documentation and an admin walkthrough, and I check in after a couple of weeks to make sure everything's working. If you want help later, I'm available hourly at $200/hr, and there's no retainer required.
Let's see if we're a fit.
Fifteen minutes, no cost, no pressure. You'll leave the call knowing what your project involves, whoever ends up doing it.