Microsoft 365 Business Premium — fully deployed, properly managed.
Most NZ businesses pay for Business Premium and use less than 20% of what they're paying for. Optimyze deploys the full stack — Defender, Intune, Entra ID, Conditional Access — and manages it every day so you're actually protected.
< 20%
of M365 features used by the average SMB
93%
of breaches start with a compromised identity
$0
extra licensing cost for Defender + Intune in Business Premium
24/7
Optimyze SOC monitoring your M365 environment
The Problem
Paying for Business Premium. Protected by Basic.
Microsoft 365 Business Premium includes Defender for Business, Intune, and Entra ID P1 — a security stack worth hundreds of dollars per user per year. But without an MSP to configure and manage them, these features sit unused while the licence renews every month.
Defender is installed but never configured
Default settings leave attack surface reduction rules off and vulnerability management unused.
Intune is licenced but no devices are enrolled
Without device enrolment, compliance policies can't be enforced and Autopilot can't be used.
Entra ID has no Conditional Access policies
MFA without Conditional Access means sign-ins from any country, any device, any time.
What's Included
Four pillars. One licence. Managed by Optimyze.
Business Premium bundles Microsoft's full SMB security stack into one plan. Here's what each pillar does — and how Optimyze makes sure you're actually using it.
Microsoft Defender for Business
Enterprise-grade threat protection purpose-built for small and medium businesses. Defender for Business provides endpoint detection and response (EDR), next-generation antivirus, attack surface reduction, and automated investigation — all managed through a single console.
- Next-generation antivirus with AI-powered threat detection
- Endpoint Detection & Response (EDR) — catch attacks already in progress
- Attack Surface Reduction rules blocking common malware entry points
- Automated investigation and remediation — threats handled without manual effort
- Threat & Vulnerability Management showing your weakest points before attackers find them
- Integration with Microsoft Sentinel for full SOC visibility
How Optimyze manages this
Optimyze configures Defender for Business as part of every Business Premium deployment. We tune attack surface reduction rules for your environment, review vulnerability reports monthly, and act on threats automatically — you hear about it in your monthly report, not in a crisis call.
Microsoft Intune
Intune is Microsoft's cloud-based Mobile Device and Application Management (MDM/MAM) platform. It lets Optimyze manage every device your team uses — company-owned Windows PCs, Macs, iPhones, and Android devices — ensuring they meet your security standards before they can access company data.
- Zero-touch device provisioning via Windows Autopilot — new laptops configure themselves
- Compliance Policies enforce password requirements, encryption, and OS versions
- Configuration Profiles push settings to every device — no manual setup
- App Protection Policies for BYOD: protect company data without touching personal content
- BitLocker encryption enforced and recovery keys stored centrally
- Remote wipe of company data if a device is lost or an employee leaves
How Optimyze manages this
When a new team member joins your business, their laptop arrives and configures itself — Microsoft 365 apps, security policies, and your company settings applied automatically via Autopilot. Optimyze manages the Intune tenant so every device meets your compliance baseline from the first login.
Microsoft Entra ID
Formerly known as Azure Active Directory, Microsoft Entra ID is the identity backbone of your Microsoft 365 environment. It controls who can access what, from where, and on which devices. When configured correctly, Entra ID is the single most effective layer of protection against account takeover.
- Conditional Access Policies — block sign-ins from untrusted locations or unmanaged devices
- Multi-Factor Authentication enforced for all users across every app
- Identity Protection — detects and responds to compromised credentials automatically
- Privileged Identity Management — just-in-time admin access, reducing your attack surface
- Self-Service Password Reset reducing helpdesk load and friction
- Passwordless authentication via Windows Hello for Business
- Guest and partner access managed with Entra External ID
How Optimyze manages this
Most breaches start with a compromised identity. Optimyze configures Entra ID Conditional Access policies that block impossible travel logins, require compliant devices, and enforce MFA on every sign-in — without making your team's daily work harder. We review sign-in logs monthly and act on anomalies before they become incidents.
Microsoft 365 Business Premium
Business Premium is the complete Microsoft 365 package for businesses with up to 300 users. It combines the productivity apps of Business Standard (Outlook, Teams, Word, Excel, SharePoint, OneDrive) with the full security stack — Defender for Business, Intune, Entra ID P1, Azure Information Protection, and Microsoft Purview — in a single licence.
- All Microsoft 365 apps: Outlook, Teams, Word, Excel, PowerPoint, OneNote
- SharePoint, OneDrive, and Teams for collaboration and file management
- Microsoft Defender for Business — full EDR endpoint security
- Microsoft Intune — MDM for all devices
- Microsoft Entra ID P1 — Conditional Access and Identity Protection
- Azure Information Protection P1 — classify and protect sensitive documents
- Microsoft Purview — compliance, audit logs, and data lifecycle management
- Microsoft 365 Defender portal — unified security management
How Optimyze manages this
At $NZD ~$42/user/month (as of 2026), Business Premium is the most cost-effective enterprise security stack available for SMBs. Optimyze includes Business Premium deployment and ongoing management in our Business and Premium managed IT packages — so the value of every feature is actually realised, not just licenced.
Plans Compared
Not all M365 plans are equal
The security features that actually protect your business are only available in Business Premium.
Business Basic
~$9
per user / month (USD)
Email and Teams only — no desktop apps, no security stack.
Business Standard
~$18
per user / month (USD)
Desktop apps and Teams — but no Defender, Intune, or Conditional Access.
Business Premium
~$42
per user / month (USD)
Everything above + full security stack. The only plan Optimyze recommends for businesses handling sensitive data.
Our Process
From under-utilised to fully managed in six steps
Whether you're migrating to M365 or already have a tenant that's never been properly configured, this is how Optimyze takes over.
Tenant Assessment
We audit your existing M365 environment — licence assignments, security defaults, Secure Score, sign-in risk, and device posture — and produce a prioritised remediation plan.
Secure Foundation Deployment
Conditional Access policies, MFA enforcement, Defender for Business activation, and Intune baseline policies deployed to every user and device.
Device Enrolment
All company devices enrolled into Intune. Compliance policies applied. BitLocker enabled. Windows Autopilot configured for zero-touch provisioning of new devices.
Ongoing Monitoring
We monitor Defender alerts, Entra sign-in anomalies, device compliance drift, and licence changes — 24/7 via our Security Operations Centre.
Monthly Reporting
Your monthly report covers Secure Score trend, active alerts and resolutions, device compliance status, and licence utilisation — in plain language, not IT jargon.
Quarterly vCIO Review
Our virtual CIO reviews your Microsoft roadmap, advises on upcoming features, and ensures your M365 investment keeps pace with your business growth.
What You Get
From zero visibility to full control
Without Optimyze
With Optimyze Managing M365
Find out what your M365 tenant is really doing
Optimyze offers a free Microsoft 365 Security Audit — we review your Secure Score, sign-in risks, Defender configuration, Intune enrolment, and Conditional Access policies, and give you a plain-language report on where you stand.
Book your free M365 audit