Five things it does.

  • Automated fixes

    Each fix is drafted for your approval; fixes that are not high-risk and can be undone can also run on their own, under a policy you approve.

    • Dry-run against the live tenant first
    • Approved by the people you name
    • Read back afterwards, with a way back saved
    The Automation page’s three modes: simulating records what it would draft and changes nothing, drafting sends each fix for approval, and fixing automatically fixes covered checks under an approval given in advance.The Automation page’s three modes: simulating records what it would draft and changes nothing, drafting sends each fix for approval, and fixing automatically fixes covered checks under an approval given in advance.
    The Automation page’s three modes: simulating records what it would draft and changes nothing, drafting sends each fix for approval, and fixing automatically fixes covered checks under an approval given in advance.The Automation page’s three modes: simulating records what it would draft and changes nothing, drafting sends each fix for approval, and fixing automatically fixes covered checks under an approval given in advance.
    The Automation page: simulate, draft each fix for approval, or fix automatically under an approval given in advance. Demo data.
  • Everyday admin

    Starters, leavers, password and MFA resets, groups, mailboxes and licences; leavers, resets and blocks go to an approver.

    • Starters and leavers as one change each
    • Password and MFA resets, groups and mailboxes
    • Leavers, resets and blocks signed for by an approver
    The first leaver steps on Employee 17’s offboarding form at Woodgrove Financial, each ticked: block sign-in, sign them out everywhere, remove their MFA methods and remove their admin roles.The first leaver steps on Employee 17’s offboarding form at Woodgrove Financial, each ticked: block sign-in, sign them out everywhere, remove their MFA methods and remove their admin roles.
    The first leaver steps on Employee 17’s offboarding form at Woodgrove Financial, each ticked: block sign-in, sign them out everywhere, remove their MFA methods and remove their admin roles.The first leaver steps on Employee 17’s offboarding form at Woodgrove Financial, each ticked: block sign-in, sign them out everywhere, remove their MFA methods and remove their admin roles.
    The leaver form for Employee 17 at Woodgrove Financial: the steps are one change, and nothing changes until an Admin or Owner approves it. Demo data.
  • Reports

    Each tenant’s readiness for Cyber Essentials, CIS and other frameworks, control by control, with reports and evidence packs in your brand.

    • Readiness for each framework, control by control
    • Reports and evidence packs in your brand
    • Sent to your clients every month
    The cover of a tenant review made by ConfigCheckup’s report renderer for a made-up tenant, Contoso Group Ltd, with the demo workspace’s logo.
    The cover of a tenant review for a made-up tenant, Contoso Group Ltd, in the demo workspace’s brand. Demo data.
  • Devices and assets

    The devices Intune and Entra know about, each with its age, support dates and replacement cost, and an asset register from purchase to disposal.

    • The devices Intune and Entra know about
    • Age, support dates and replacement cost
    • An asset register from purchase to disposal
    LAPTOP-1004’s own page on the asset register, the page its QR label opens: a Dell Latitude 7480 in use, who has it (Tom Becker), its asset tag and label, then what needs attention: its system is out of support, it is due for replacement and its warranty has expired.LAPTOP-1004’s own page on the asset register, the page its QR label opens: a Dell Latitude 7480 in use, who has it (Tom Becker), its asset tag and label, then what needs attention: its system is out of support, it is due for replacement and its warranty has expired.
    LAPTOP-1004’s own page on the asset register, the page its QR label opens: a Dell Latitude 7480 in use, who has it (Tom Becker), its asset tag and label, then what needs attention: its system is out of support, it is due for replacement and its warranty has expired.LAPTOP-1004’s own page on the asset register, the page its QR label opens: a Dell Latitude 7480 in use, who has it (Tom Becker), its asset tag and label, then what needs attention: its system is out of support, it is due for replacement and its warranty has expired.
    LAPTOP-1004’s page on Contoso Group Ltd’s asset register: who has it, its tag, and what needs attention, from support to warranty. Demo data.
  • Licence savings

    It finds licences paid for and not used, shows the accounts behind each one, and reclaims them as an approved change that can be rolled back.

    • Licences paid for and not used
    • The accounts behind each one
    • Reclaimed as an approved change that can be rolled back
    One licence saving suggested in the console for a demo tenant: Microsoft 365 E3 on accounts unused for 90 days, its estimated saving a year, the suggested action with a Reclaim these licences button (sent for approval after its dry run, and it can be rolled back), what to check first and the evidence.One licence saving suggested in the console for a demo tenant: Microsoft 365 E3 on accounts unused for 90 days, its estimated saving a year, the suggested action with a Reclaim these licences button (sent for approval after its dry run, and it can be rolled back), what to check first and the evidence.
    One licence saving suggested in the console for a demo tenant: Microsoft 365 E3 on accounts unused for 90 days, its estimated saving a year, the suggested action with a Reclaim these licences button (sent for approval after its dry run, and it can be rolled back), what to check first and the evidence.One licence saving suggested in the console for a demo tenant: Microsoft 365 E3 on accounts unused for 90 days, its estimated saving a year, the suggested action with a Reclaim these licences button (sent for approval after its dry run, and it can be rolled back), what to check first and the evidence.
    A suggestion on Contoso Group Ltd’s Licences page: reclaiming goes for approval after its dry run and can be rolled back. A seat taken back is billed until the seat count is reduced. Demo data.