Outsourced IT Management for Microsoft 365 and Entra ID

LeadThem Consulting has run outsourced IT operations for Microsoft 365, Active Directory, and Entra ID environments since 2005. Whether you need a full IT department, a specialist to back up an in-house team, or coverage for a workload your staff does not handle every day, our consultants step in and run it. We do not sell shrink-wrapped managed-services packages. We scope each engagement to the environment, the workloads, and the risk profile in front of us.

Modern IT operations are anchored on identity. Once Entra ID and the Microsoft 365 tenant are managed correctly, mailbox, collaboration, and endpoint operations follow. Our work starts there and extends into the workloads your users actually touch every day.

Microsoft 365 administration

We administer Microsoft 365 tenants end to end. That covers Exchange Online (mail flow, transport rules, hybrid coexistence, public folders), SharePoint Online and OneDrive (site provisioning, permissions audit, retention), Microsoft Teams (governance, meeting policy, voice routing), and the Microsoft 365 admin center itself. Day-to-day, that means user lifecycle (joiners, movers, leavers), license optimization, mailbox and group hygiene, and the unglamorous reporting work that keeps an audit clean.

Identity and endpoint management

Entra ID (formerly Azure AD) is the control plane for every modern Microsoft 365 environment. We manage Conditional Access policies, multi-factor authentication enforcement, privileged identity management, and hybrid identity sync with on-premises Active Directory. For endpoints, we manage Microsoft Intune profiles, compliance policies, and app deployment. Defender for Endpoint signal flows back into Conditional Access, so a non-compliant device cannot reach your data. Purview retention and sensitivity labels stay enforced through every change we make.

SharePoint Online and content operations

SharePoint Online sprawl is one of the most common reasons customers call us. We use Quest Essentials for Microsoft 365 v2.15 to inventory site collections, audit permissions, repair metadata, and migrate content between sites or tenants without breaking links. Combined with Quest On Demand Group Management, we keep group sprawl, naming conventions, and ownership in check across the tenant.

Active Directory operations and recovery

For environments that still run on-premises Active Directory alongside Entra ID, we handle the day-to-day operational work and the once-a-year work most teams hope they never need. We use Quest Recovery Manager for Active Directory for granular on-premises object recovery and forest recovery rehearsals, and Quest Identity Recovery for hybrid AD and Entra ID recovery, including Standby AD Forest provisioning. So a ransomware event or a fat-fingered schema change does not become an extinction-level outage.

Identity threat detection

For clients who want continuous identity protection, we deploy and operate Quest Identity Defense (formerly Security Guardian), the AI-powered hybrid AD and Entra ID security solution that identifies risk, blocks unauthorized changes to Tier 0 assets, and contains attacks before they spread. Identity Defense and Identity Recovery sit under the Quest Identity Security and Resilience solution within the Quest Security Management Platform.

Why LeadThem

• Quest Security Management Platform partner. We operate the full Identity Security and Resilience portfolio (Identity Recovery, Identity Defense, Recovery Manager for AD) as ongoing services, alongside the Microsoft 365 and Entra ID administration above.
• Quest Software partner since 2005. Direct access to Quest product engineering and pre-release builds on the tools that run your environment.
• All of our resources are Quest Certified. Every consultant who touches your tenant has been trained and certified by Quest on the products they operate.
• Microsoft-trained engineers. Our team is trained on the current Microsoft 365, Entra ID, and Intune administrative model, not the 2018 version of it.
• Scoped to your environment. No tiered packages, no per-seat surcharges for things you do not need. We scope by workload, complexity, and operating hours.
• Coverage that fits your team. Full outsource, co-managed, or specialist backfill, depending on what your in-house staff already handles well.