Trois-Rivières, serving all of Quebec 450 231-3836 info@oktosolutions.ca
FR

Sherbrooke

IT Services in Sherbrooke, With Microsoft 365 Set Up Right

About 151 km lie between Sherbrooke and our Trois-Rivières office. At that distance we will not pretend to be neighbours: the service is fully remote. It works because most of what an SMB does now lives in Microsoft 365, not in a server room.

A Sherbrooke SMB can have its IT managed remotely provided Microsoft 365 is configured properly. Three settings carry most of the weight: clean accounts with multi-factor authentication, SharePoint and Teams sharing limited to the right people, and conditional access rules that decide who signs in, from which device and under what conditions.

Workstation with keyboard and tablet linked to the cloud, set up for secure remote access

Can you trust your Microsoft 365 to a provider that is not in Sherbrooke?

Yes, as long as the provider is upfront about it. OKTO Solutions serves Sherbrooke businesses from Trois-Rivières, about 151 km away, with no office and no technician in the city. Everyday service is delivered entirely remotely, and travel is planned only for a project that demands it. The model holds because Microsoft 365 is administered through its portals: creating an account, pulling a licence, fixing a share or adjusting an access rule requires nobody on the premises. Work often begins with a configuration audit that reviews twelve points read-only, from identities through to Law 25, and ends with a report of findings ranked by risk. Three pieces of work follow: putting accounts back in order, tightening SharePoint and Teams sharing, then writing conditional access rules. The support team can be reached 8 a.m. to 5 p.m., Monday through Friday.

The model

What gets done from 151 km away, and what does not

Better to know before you sign. Task by task, here is what we settle from our screens and what needs a person in your space.

TaskRemotelyWhat it takes on your end
Create or close an account, assign a licenceYes, through the Microsoft 365 portalsLetting us know about the arrival or departure
Fix a workstation, install software, apply patchesYes, through our management tools installed on the deviceA computer that is on and connected to the Internet
Lock a lost laptopYes, if the device is enrolled in central managementCalling us as soon as the loss is noticed
Prepare a new workstationYes, it is prepared at our office and shipped ready to plug inReceiving the device and handing it to the employee
Cable a space, replace a Wi-Fi access point or a switchNoA planned visit, or someone on site guided over the phone

That last row is where the model stops, and we would rather put it in writing. If your business relies on equipment that often needs hands on it, a closer provider will suit you better. If your work happens mostly in email, Teams and SharePoint, distance changes next to nothing. Day-to-day details are on the IT support page.

The starting point

What does a Microsoft 365 audit turn up?

A tenant that runs is not necessarily a tenant that is well kept. Most were set up in a hurry a few years back, then altered as people left and projects came and went. Nobody tidied up because nothing was broken.

The audit goes through twelve points, read-only. The findings repeat from one business to the next. Multi-factor authentication switched on for nearly everyone, except management and accounting. Too many global administrators, a former provider among them. Guests left over from a finished project. Payroll documents stored in a space open to all, which nobody intended.

The security score Microsoft displays is a useful reference, but it does not know your business. It grades settings without knowing which ones count for you. The report starts from your situation and ranks findings by risk.

Each point is read without changing anything, gets a verdict, and the findings are then sorted by risk.

The essentials

Which three settings matter most?

A team supported from afar has no office firewall protecting it everywhere it goes. Protection rests on identity. Three pieces of work do nearly all of it.

Accounts

One account per person, closed the day they leave. Multi-factor authentication required of everyone, management included. Few global administrators, and no admin account doubling as an everyday mailbox.

Sharing

Who is allowed to invite an outsider, which links have no end date, which Teams have lost their owner. Sensitive documents move to a space reserved for a named group.

Conditional access

Rules that look at the device, the location and the application before letting anyone in. An enrolled, encrypted laptop goes through. A sign-in from an unknown device has to do more, or stays out.

The exclusion trap. A conditional access rule loses its meaning when an exception is added every time somebody gets blocked. The exclusion list is one of the things we reread at each review. Cloud data needs its own copy too, as explained under Microsoft 365 backup.

The link open to anyone is removed, the files go back to the group, the counter drops to zero.

The cleanup

Who can open your files today?

It sounds like an easy question and hardly anyone can answer it. Over the years a folder gets shared with an outside accountant, an “anyone with the link” link goes out to save time, a consultant is added to a Teams channel. The project wraps up. The share stays.

The cleanup takes three passes. We draw up the real list of guests and when each last signed in. We find the links with no end date and the sites open to the whole organization. Then we decide, with you, what stays open and for whom. After that, written rules keep it from creeping back: time-limited links, controlled invitations.

The job turns urgent the day you switch on Copilot, which answers from everything the employee is allowed to open. A badly filed document then stops being a secret kept safe by neglect.

The area

Sherbrooke, a large city served from afar

Sherbrooke is in the Estrie region and has four boroughs. Its population was estimated at 183,265 in 2024 by the Institut de la statistique du Québec.

183,265estimated residents in 2024
4boroughs
151 kmapproximately, by road, to our Trois-Rivières office

A city this size has IT providers of its own, and some will be ten minutes from your door. We are not going to argue otherwise. What we bring is something else: a Microsoft 365 configuration put back in order and kept that way, an audit report that is yours to keep, and follow-up that does not hinge on distance. Service terms come under the Base, Standard and Complet plans, outlined on the managed IT services page.

We also serve Drummondville, with a focus on cybersecurity for manufacturers, and Victoriaville, where everything starts with a cybersecurity audit. The service areas page has the complete list, and the contact page is the place to describe your team.

Questions and answers

Your questions about Microsoft 365 and our services in Sherbrooke

Do you travel to Sherbrooke?
Seldom, and we say so beforehand. Sherbrooke is about 151 km from Trois-Rivières: for everyday needs it is a city we serve entirely from a distance. A trip is planned for a project that calls for one, such as setting up a new office. We have neither premises nor a technician in Sherbrooke.
Can Microsoft 365 really be administered without ever visiting the office?
Yes. Accounts, licences, groups, SharePoint sharing, conditional access rules and email security are all managed through the admin portals. None of it sits in your building. What remains physical is the workstation itself and the office network.
What does a Microsoft 365 audit check for a Sherbrooke business?
Twelve points, reviewed read-only: identities, admin roles, conditional access, external sharing and guests, SharePoint and Teams, shared mailboxes, email security, backup, the audit log, mobile devices, licences and Law 25. The report ranks findings by risk.
Do we have to hand over our global administrator account?
No. For the audit, a read-only role covers most of it. We specify which role is requested and when, and access is removed once the engagement ends. Your own logs keep a trace of our sign-ins.
A new hire starts Monday in Sherbrooke. How do they get a computer?
The account, licence, groups and access are created remotely before they arrive. The workstation is prepared at our office with the company’s applications and rules, then shipped ready to plug in. Nobody has to make the drive for that.
Does Microsoft back up our email and files?
Not in the sense an SMB expects. Cloud data is not protected by default against a deletion noticed too late or against a compromised account. It is one of the twelve audit points, and an independent copy is part of what we put in place.

Your Microsoft 365 deserves a fresh look

Tell us how many accounts you have, how old the tenant is and who administers it today. We will say whether an audit is worth it and what it would cover.

Reviewed by , president of OKTO Solutions · updated