MSP Partners
White-label Microsoft 365, Intune and Server projects for MSPs
Fixed-scope projects delivered by one senior engineer, under your brand, handed back with documentation your team can support.
How white-label works
- 1
Sign before access
NDA and white-label agreement signed before any access is granted.
- 2
Least-privilege access
Through your delegated admin or named accounts, with an end date.
- 3
Delivered under your brand
Your brand on all deliverables, handed back with documentation your team can support.
The offers
Three fixed-scope offers
Offer 1
M365 + Intune Health Baseline
A scored, read-only review of a client tenant, with a prioritised fix list you can turn into billable work.
Good for: MSPs onboarding a new client, taking over a tenant, or preparing a security review.
You receive
- A branded report with a score and risk rating per area
- A prioritised fix list (quick wins, 30-day fixes, project-size items)
- A 30-minute walkthrough call
What we check (read-only)
- Entra ID admin roles, MFA coverage, conditional access, guest and stale accounts
- Intune enrolment, compliance, configuration, update rings, device and app inventory
- Exchange Online forwarding rules, shared mailboxes, anti-phishing and DMARC/SPF/DKIM status
- Licensing waste
Delivery: Typically within 5 working days of access being granted.
Pricing: Fixed price per tenant, quoted on request.
Not included
- Any changes to the tenant
- On-premises servers
- Penetration testing
- Legal or compliance opinions
Offer 2
Intune Baseline Rollout
A standard, repeatable Intune setup for a Windows client tenant, with a runbook you can reuse across your clients.
Good for: Unmanaged or partly managed clients, or clients moving from Group Policy or SCCM.
You receive
- Windows Autopilot with a tested profile
- Compliance, configuration and update-ring policies
- BitLocker, Defender and basic security settings
- Up to 5 standard apps deployed
- A runbook and handover session
Scope: Up to 50 Windows devices per tenant. Larger fleets quoted.
Pricing: Fixed price per tenant, quoted on request.
Not included
- Apple or Android management
- Custom packaging beyond the 5 apps
- Hardware procurement
- Ongoing helpdesk
Offer 3
Windows Server 2016 Exit Sprint
Move a client off Windows Server 2016 with a tested rollback plan.
Why now: Extended support for Windows Server 2016 ends on 12 January 2027. After that date Microsoft stops publishing free security updates unless the server is covered by paid Extended Security Updates. Servers keep running, but new vulnerabilities stay unpatched. Windows Server 2019 is supported until 9 January 2029.
Source: Microsoft LifecycleYou receive
- Server and role inventory
- A target-version recommendation and migration plan
- Domain controller migration where in scope (new DC, FSMO transfer, DNS and DHCP, functional level, old DC demoted)
- File server migration with Storage Migration Service
- Rollback plan and handover document
- Advice on stopgaps such as Azure Arc ESU for servers that cannot move in time
Scope: Per server or per site, set after a fixed-price inventory step.
Pricing: Fixed price per server or site after the inventory step.
Not included
- Application re-installs or vendor support
- Hardware
- Exchange, SQL Server or ERP migrations
Working with ATS
- Your brand on all deliverables
- NDA and white-label agreement signed before access
- Least-privilege access through your delegated admin or named accounts, with an end date
- Optional prepaid Tier 2 support blocks after handover
Start with a free 5-hour pilot
Prefer to write directly? [email protected]
[TODO: booking link, if I add one]
ATS works from South Africa (SAST), Monday to Friday, 08:00 to 17:00.