What we have actually done

Business IT experience

Tech True Point is built on senior experience from enterprise IT departments and managed service providers. This section says where that experience comes from and what it actually involved, because "senior-led" means nothing on its own. It is background, not a client list: none of it describes a Tech True Point engagement, and none of it should be read as a claim about a named business.

Microsoft 365 across many tenants at once

Day-to-day administration of sixteen separate client tenants inside a managed service provider, not one tenant looked after well. That is a different discipline: you find out quickly which settings are worth standardising across every client and which have to stay specific to one, and you stop trusting anything you cannot check from a script. Mailbox lifecycle throughout, shared mailbox conversions, delegation and calendar permissions, message trace when mail goes missing, and transport rules that were doing something nobody remembered approving.

Identity, access and Conditional Access

Entra ID app registrations and OAuth consent, secret rotation and redirect URI configuration, including rebuilding a mail security vendor's integration across multiple tenants to restore remediation that had quietly stopped working. Conditional Access policies with exclusion groups for geo-blocking and approved travel, scoped so genuine sign-ins keep working, which is the part most guides skip. This is the ground underneath cybersecurity, identity and devices.

Hybrid environments at real scale

On-premises Active Directory and Exchange running hybrid with Azure AD Connect for organisations between five hundred and a thousand people: provisioning, group policy, licensing and mail flow, with the on-prem side and the cloud side having to agree. Also mixed Windows and macOS estates of several hundred users, which is where the "Microsoft or Apple" argument usually turns out to be a false choice.

Devices, endpoints and automation

Intune and Autopilot for provisioning and device compliance, MDM policy enforcement, and endpoint repair through remote monitoring tooling and log analysis rather than guesswork. PowerShell throughout, against Exchange Online, the Microsoft Graph SDK, PnP and Teams: written as scripts that can be handed over and run again, not commands typed once and forgotten. That habit is what business automation is built on.

Compliance and cleaning up after incidents

Retention and legal holds, content searches, and purging phishing mail out of an estate after it landed. Repairing broken file sync from what the logs actually say. Unglamorous work, and the reason an inherited mess is a familiar starting point rather than an alarming one: see technical cleanup.

Apple alongside Windows

Enterprise macOS and iOS support at second line: device imaging, enrolment through Apple Business Manager, and policy enforcement, in buildings where Apple and Microsoft systems ran side by side and had to get along. Written troubleshooting guides and training for the staff who used them, which is where the habit of documenting things comes from.

Also, honestly

Google Workspace, domains and DNS, hosting, vendor and licence management, onboarding and offboarding, and the websites: all real, all covered under IT services, and none of them the deepest thing on this page. Certifications behind the above: CompTIA A+ and Network+, Microsoft 365 administration and Apple management training, and Cisco networking.

How we choose what goes here

Only real client work, shown with permission, appears in the projects section. Our own products and any pitch or demo sites do not, because presenting either as a client engagement would be dishonest. As we ship more sites and clients agree to be shown, that section grows.

Website work is one of the things we do rather than the whole of it, and it sits alongside the IT services above. If you run a restaurant, the thinking behind the project below is set out in more general terms on restaurant web design.