Posch IT Consulting & Solutions Book an appointment
Microsoft 365 Security & Compliance · Vienna

I make Microsoft 365 environments secure and compliant.

For regulated and critical industries in DACH, Luxembourg, Belgium and France, from banks and insurers to healthcare. The result: less risk, clearly structured tenants and audit-ready environments.

Book an appointment with François View projects
85%+Microsoft Secure Score
after tenant hardening

The initial consultation (30–60 minutes) is free and without obligation.

François Posch, IT consultant for Microsoft 365
85%+
Microsoft
Secure Score
after tenant hardening
  • CSP partnerMicrosoft Cloud Solution Provider
  • 6 countriesAT · DE · CH · LU · BE · FR
  • Microsoft Certifiedsince 2015 · SC-300, MS-102, MD-102, AZ-104
    Microsoft Certified ExpertMicrosoft Certified Associate
  • 1,000+ employeesfrom small businesses to large corporations
When you need me

Typical situations my clients are in

  • An account was compromised, and you are wondering whether someone unauthorised is still in your systems.
  • An audit or inspection is coming up and you want to know where you stand.
  • Too many people have far-reaching access rights, and nobody knows exactly who can do what.
  • You are not sure whether your Microsoft 365 environment would withstand an attack.
  • Your Microsoft licences are hard to keep track of and cost more than necessary.
  • Your IT team has no time for security alongside day-to-day work.
Services

An overview of my services

The focus is on the security and compliance of your Microsoft 365 environment.

Security

I reduce the risk of attackers getting into your Microsoft 365 environment and make sure you can still act in an emergency.

  • Securing your tenant in line with proven security standards (tenant hardening)
  • Security assessments with concrete recommendations
  • Protection of identities and admin access
  • Emergency access so you never lock yourself out (break-glass accounts)
  • Response and support for security incidents
  • Microsoft 365 Backup
Implemented with
  • Entra ID
  • Conditional Access
  • MFA
  • Microsoft Defender

Compliance

So that you pass audits and inspections: a clearly structured, traceably documented environment.

  • Security settings based on recognised standards (CIS, Microsoft)
  • Admin rights only where they are really needed (least privilege)
  • Clear structure and documentation of your tenant
  • Compliance policies for all devices
  • Reviewing and optimising licensing
Implemented with
  • Entra ID
  • Privileged Identity Management
  • Intune compliance policies

Device management

All company devices are managed centrally and protected, even if a laptop gets lost.

  • Initial setup and rollout of new devices
  • Distributing software automatically
  • Integration of Apple and Android devices
  • Migration from SCCM and legacy MDM solutions
Implemented with
  • Intune
  • Windows Autopilot
  • Apple Business Manager
  • Android Enterprise
My principle

In all my work I consistently rely on the native security features of Microsoft 365, without additional third-party tools.

Approach

How does a project with me work?

After the initial conversation I can give you a realistic estimate of the effort and duration.

  1. Initial consultation & current-state analysis

    Where are you now, and what do you need?

  2. Workshop & design

    Working out the solution together.

  3. Proposal & planning

    A clear cost overview and schedule.

  4. Implementation

    I work closely with your IT team.

  5. Knowledge transfer & handover

    Your admins are brought up to speed.

  6. Support

    If needed, I remain available afterwards.

2–4 weeks Tenant review & security hardening 3–6 months Cloud migrations (Exchange, AD) 6–12 months Complete modern workplace transformation
Projects

Selected projects

As a specialised IT consultant, I support companies in German- and French-speaking countries with the implementation of modern Microsoft 365 infrastructures.

since 07/2025ongoing

Cloud Migration & Security Hardening

  • Financial services
  • Mid-sized company (600 employees)
  • France

Migration of an on-premises Exchange environment to the cloud while raising the level of security. Evaluation of Microsoft Intune as the successor to the existing MDM infrastructure.

My services (10)
  • Microsoft 365 tenant review & security hardening
  • Implementation of comprehensive Conditional Access policies
  • Break-glass concept: setup and documentation
  • Admin role concept based on the principle of least privilege
  • Exchange hybrid migration (planning and configuration)
  • Email security: DKIM, DMARC, DNSSEC, DANE
  • Microsoft Defender for Office 365
  • Secure Score optimisation (90%+)
  • Licensing review and optimisation
  • Backup strategy for Microsoft 365
Microsoft 365, Exchange Online, Entra ID, Conditional Access, Microsoft Defender for Office 365
12/2024 – 05/2025

Full Cloud Transformation

  • Non-profit
  • SME (250 employees)
  • Austria (multiple sites)

Complete replacement of the outdated on-premises infrastructure with modern cloud solutions, with a focus on security and modern workplace concepts.

My services (8)
  • Project management and coordination with the local IT team
  • Migration: Exchange, Active Directory, file server, SCCM
  • Microsoft 365 tenant hardening & Secure Score optimisation
  • Entra Connect implementation
  • Microsoft Intune – Autopilot
  • Active Directory migration to Entra ID
  • Decommissioning of the legacy server infrastructure
  • Admin-to-admin training & knowledge transfer
Microsoft 365, Exchange Online, Entra ID, Entra Connect, Conditional Access, MFA, Intune, BitLocker, LAPS
2023 – 2024

Cloud Migration & Modern Workplace Rollout

  • Financial sector
  • Mid-sized company (400 employees)
  • Austria

Cloud transformation with the rollout of 250 new devices via Autopilot and a seamless migration to Exchange Online before the on-premises infrastructure reached end of life.

My services (11)
  • Project support and coordination
  • Microsoft 365 tenant review & hardening
  • Hybrid join configuration
  • Conditional Access & MFA implementation
  • Self-service password reset (SSPR)
  • Group-based licensing & Privileged Identity Management (PIM)
  • Intune: compliance policies, configuration profiles, Autopilot (hybrid)
  • Software deployment strategies
  • On-premises: AD domain functional level upgrade, Entra Connect, Cloud Kerberos, GPO migration
  • LAPS migration & DSRM password management
  • Admin-to-admin training
Microsoft 365, Microsoft Defender for Office 365, Entra ID, Entra Connect, PIM, Conditional Access, Intune, BitLocker, LAPS
2023 – 2024

Global Endpoint Management Implementation

  • Life sciences / biotechnology
  • Enterprise (600 employees)
  • International

Worldwide introduction of Microsoft Intune with coordinated hardware procurement and rollout across several countries and sites.

My services (9)
  • Project coordination with the local IT team
  • Licensing & tenant optimisation
  • Conditional Access, MFA, SSPR
  • Group-based licensing & PIM
  • Intune: compliance, configuration profiles, Autopilot (hybrid), app deployment
  • Coordination of global hardware procurement
  • Entra Connect, Cloud Kerberos key rollover
  • Active Directory & GPO integration
  • Admin-to-admin training
Microsoft 365, Microsoft Defender for Office 365, Entra ID, Entra Connect, Conditional Access, Intune, BitLocker, LAPS
2023

MDM Modernization & Apple Device Management

  • Manufacturing / FMCG
  • Enterprise (1,000+ employees)
  • Austria (nationwide)

Replacement of a legacy MDM solution with Microsoft Intune, with a particular focus on Apple device management.

My services (6)
  • Workshop facilitation & requirements analysis
  • Project coordination with the local IT team
  • Intune configuration & compliance policies
  • Apple Business Manager integration
  • App deployment & lifecycle management
  • Admin-to-admin training
Microsoft Intune, Apple Business Manager
2022 – 2023

Cloud Migration & Azure Infrastructure

  • Legal services
  • SME (100 employees)
  • Luxembourg & France

Complete replacement of the on-premises infrastructure with cloud solutions using a hybrid approach (IaaS + SaaS).

My services (9)
  • Project support & coordination
  • Exchange migration to Exchange Online
  • Azure IaaS: virtual machines, Azure Files, network/VPN
  • Active Directory domain controller migration
  • Data migration to Azure file shares
  • Azure Virtual Desktop implementation
  • Intune endpoint management
  • Firewall hardware migration (FortiGate)
  • Decommissioning of the legacy infrastructure
Microsoft 365, Exchange Online, Entra ID, Entra Connect, Conditional Access, Intune, Azure Virtual Machines, Azure Files, FortiGate, WithSecure

Note: all project descriptions have been anonymised for confidentiality reasons. Client-specific details have been removed or generalised.

Testimonials

What clients say about working with me

Our Microsoft ecosystem had grown over more than ten years, and he helped us review the whole thing thoroughly and clean it up. He works very methodically and carefully, documents everything and is always quick and easy to reach when we have questions.

Read full review

François supported us in optimising our Microsoft 365 tenant and our Azure subscriptions. Our Microsoft ecosystem had grown over more than ten years, and he helped us review the whole thing thoroughly and clean it up. He works very methodically and carefully, documents everything and is always quick and easy to reach when we have questions. On top of that, he is proactive: Microsoft keeps changing, and François comes to us on his own whenever there are new options for security or configuration. A very reliable partner for us – I have already recommended him several times.

Mischa HerbrandFounder & Managing Director, Valudiotranslated from German

François is someone you can really rely on for IT support. He works calmly and professionally and finds good solutions quickly, without making things more complicated than they need to be.

Read full review

François is someone you can really rely on for IT support. He works calmly and professionally and finds good solutions quickly, without making things more complicated than they need to be.

Working with him is always pleasant and straightforward. We particularly appreciate his clear communication and how reliable he is.

At CTex, we really enjoy working with François and recommend him wholeheartedly.

Thomas ArthCTex Solutions GmbHtranslated from German

His competence, efficiency, and the way he manages everything remotely are truly impressive. … What I value most is the sense of trust and safety he creates.

Read full review

I’ve been a heavy IT user for more than 30 years and have handled most things myself. But staying up to date and solving issues while being busy and building up my own business has often been stressful and time-consuming.

Working with François has been a completely different experience. His competence, efficiency, and the way he manages everything remotely are truly impressive. We solved things quickly and smoothly – without unnecessary complexity.

What I value most is the sense of trust and safety he creates. It significantly reduced my stress and allowed me to focus on what really matters.

I can warmly recommend François and I’m very much looking forward to our continued cooperation.

Roni CesnjajEvolé

Recommendations on LinkedIn

About me

François Posch

I am a dedicated IT expert and a keen Microsoft enthusiast with a passion for continuous learning and personal development.

My professional focus is on services around Microsoft technologies and IT security. I approach challenges directly and with a focus on solutions – driven by my ambition to always achieve the best possible result.

Born in the German-speaking region of East Belgium, I have lived and worked in Vienna since 2023.

My professional foundation is vocational training as an IT specialist, which I completed with distinction in 2016. Since then, I have kept my knowledge up to date through ongoing Microsoft certifications.

Microsoft Certified Expert Microsoft Certified Associate

Current certifications

  • 2025–2027Microsoft Certified: Identity and Access Administrator Associate SC-300
  • 2024–2027Microsoft 365 Certified: Administrator Expert MS-102
  • 2024–2027Microsoft 365 Certified: Endpoint Administrator Associate MD-102
  • 2023–2027Microsoft Certified: Azure Administrator Associate AZ-104
Microsoft Transcript
Partnerships

Working with IT service providers

In the IT industry, trust is what counts. I work both directly with companies and with established IT service providers that use my Microsoft expertise for their projects. These partnerships are based on proven collaboration and mutual trust.

Digital Vision

Northern Luxembourg

For insurers and private banks, I work closely with Digital Vision from northern Luxembourg to deliver secure and efficient solutions in the Microsoft environment.

WISE IT GmbH

Zurich, Switzerland

As a strategic partner of WISE IT GmbH in Zurich, we combine our Microsoft 365 cloud expertise with many years of experience in IT architecture and infrastructure engineering.

FAQ

Frequently asked questions

Can't find your question? Write to me and I will get back to you within 24 hours.

Get in touch

General questions

What exactly do you do?

I specialise in Microsoft 365 – mainly cloud migrations, security hardening and modern device management with Intune.

My job: to set up your IT securely and make it ready for the future.

Who do you work for?

I work for companies of all sizes – from small businesses to corporations with over 1,000 employees, across all industries.

Where do you work?

My clients are based in Austria, Germany, Switzerland, Luxembourg, Belgium and France. I work from Vienna, but thanks to remote working, distance does not play a major role.

Do you also work with other IT service providers?

Yes, I do so regularly. I am happy to step in as a subcontractor or as a specialist for Microsoft 365 & security.

Do you have references?

Yes, further up this page you will find anonymised project examples from various industries and company sizes.

What is the best way to reach you?

By email at contact@poschit.com or via LinkedIn (François Posch). I will get back to you within 24 hours. You can also book a free initial consultation online.

Microsoft 365, security & cloud

What is Microsoft Secure Score and why should it matter to me?

Secure Score shows how well your Microsoft 365 tenant is secured – on a scale from 0 to 100%.

The higher the score, the better you are protected against cyberattacks. After tenant hardening, my clients' tenants are usually at 85% or higher.

What does “tenant hardening” mean?

It is the comprehensive securing of your Microsoft 365 environment. This includes, among other things:

  • Conditional Access policies
  • Multifactor authentication (MFA)
  • Admin roles based on least privilege
  • Configuring Microsoft Defender correctly
  • Setting up break-glass accounts
  • Security baselines (CIS/Microsoft benchmarks) & compliance
Do you also help with compliance requirements?

Yes. I set up your Microsoft 365 environment so that it is clearly structured, traceably documented and audit-ready. This includes, among other things:

  • Security baselines based on CIS/Microsoft benchmarks
  • Admin roles based on least privilege
  • Compliance policies for all devices
  • Documentation of the configuration
Can you also move on-premises systems to the cloud?

Absolutely, I do this all the time:

  • Exchange Server → Exchange Online
  • Active Directory → Entra ID
  • File server → SharePoint, OneDrive or Azure Files
  • SCCM → Intune
  • Legacy MDM solutions → Intune

The migration follows a structured process – with as little downtime as possible for your users.

What is Microsoft Intune and do I actually need it?

Intune is Microsoft's solution for modern device management – for Windows, Macs and mobile devices.

What does it do for you?

  • New devices are set up automatically (Windows Autopilot)
  • Central security policies (BitLocker, firewall, Defender)
  • Distributing apps and keeping them up to date
  • Monitoring compliance

If you need to manage Windows 10/11, Macs or smartphones, there is no longer any way around Intune today.

What does Microsoft CSP partner mean?

As a Cloud Solution Provider, I can provide and manage Microsoft 365 licences for you directly.

Your benefits:

  • Central billing through me
  • A direct contact for licensing questions
  • I help you optimise costs
Do you also help with licensing?

Yes, gladly. I review your current licensing and identify:

  • Unused licences
  • Where you are over- or under-licensed
  • Which licensing model suits you
  • Concrete savings potential

Initial consultation, costs & support

Is the initial consultation free?

Yes, the initial consultation (30–60 minutes) costs nothing and is without obligation. You receive an initial assessment and concrete recommendations.

How much does a project cost?

That naturally depends on the scope. After a free initial consultation, you receive a transparent quote – either as a fixed price or at a daily rate.

Do you also offer ongoing support?

Yes, if required. This can be a managed service package, a support retainer or simply support as and when needed – whatever suits you best.

Contact

Let's talk

Whether it is planned security work or an acute security incident, the first step is a conversation without obligation.

Book an appointment with François LinkedIn
Address
Wagramer Straße 2
14. Etage, Tür 5
1220 Wien, Austria
Response time
I will get back to you within 24 hours.