Services — Artisan IT Consulting

Partnership with Summit Holdings

Managed Operations

24/7 NOC, SOC, and service desk coverage — U.S.-based teams, white-labeled under your brand, ITIL-aligned and CIS-mapped. Delivered in partnership with Summit Holdings.

Service	Scope & Deliverables	Timeline	Investment
24/7 NOC Monitoring	Proactive network monitoring, alert triage, incident detection and response, escalation management, uptime reporting	Ongoing	Per-user / mo
Security Operations Center (SOC)	Threat detection, SIEM management, security alert triage, vulnerability reporting, compliance dashboards	Ongoing	Per-user / mo
Service Desk (SDX)	Tier 1–2 end-user support, ticketing via ConnectWise, SLA-backed response, escalation to senior engineers	Ongoing	Per-user / mo
Voice & Network Engineering	VoIP design and deployment, SD-WAN, firewall configuration, network health monitoring and optimization	Ongoing	Custom quote
Technical Account Management	Dedicated TAM, quarterly business reviews, roadmap planning, vendor liaison, escalation management	Ongoing	Included
Pre-Sales & Onboarding Support	Solution consulting, proposal support, client discovery, onboarding coordination, new client provisioning	Per engagement	Custom quote

Microsoft 365 & Identity

Tenant deployments, identity architecture, and security hardening. Every engagement delivers a production-ready, documented environment.

Service	Scope & Deliverables	Timeline	Investment
M365 SMB Full Deployment	New tenant setup: Exchange, Teams, SharePoint, OneDrive, Defender, Intune baseline, DNS, MX, SPF/DKIM/DMARC	2–3 weeks	$4,500–$7,500
Tenant-to-Tenant Migration	User, mailbox, SharePoint, and OneDrive migration between tenants; cutover coordination and DNS update	3–5 weeks	$6,000–$14,000
Exchange Online Hardening	Mail flow rules, anti-phishing/spam policies, connectors, shared mailbox governance, retention policies	1–2 weeks	$2,250–$4,500
Entra ID Security Hardening	Conditional Access policies, MFA enforcement, SSPR, Entra ID P1 config, named locations, sign-in risk policies	1–2 weeks	$2,250–$4,500
DMARC / DKIM / SPF Implementation	DNS records, M365 policy config, enforcement rollout (none → quarantine → reject), monitoring setup	3–5 days	$900–$1,500
Entra Connect Deployment	AD prep, UPN alignment, sync readiness, Entra Connect install, attribute mapping, initial sync validation	1–2 weeks	$3,000–$5,250
SAML SSO Integration	Entra ID as IdP for third-party app (VPN, SaaS, firewall), group claim config, attribute mapping, testing	3–5 days	$1,200–$2,250
Teams Governance & Deployment	Naming policies, lifecycle management, guest access controls, channel standards, Teams Phone setup	1–2 weeks	$2,250–$4,500

Intune & Endpoint Management

Full Intune deployments, device management policy builds, and hybrid join configurations — delivered with enrollment validation and a handoff package.

Service	Scope & Deliverables	Timeline	Investment
Intune Greenfield Deployment	Tenant config, compliance policies, configuration profiles, app deployment framework, enrollment setup (BYOD + Corp)	2–3 weeks	$4,500–$7,500
Hybrid Entra Join Deployment	AD prep, Group Policy config, Entra Connect settings, hybrid join validation, Autopilot hybrid profile setup	2–3 weeks	$4,500–$7,500
Autopilot Deployment Build	Hardware hash collection, Autopilot profile config, Enrollment Status Page (ESP), deployment testing, documentation	1–2 weeks	$2,250–$4,500
Endpoint Security Baseline	Microsoft security baseline import, Defender for Endpoint onboarding, EDR policy, Attack Surface Reduction rules	1–2 weeks	$2,250–$4,500
Windows Update for Business	Update ring design, deferral policies, feature update management, Intune-WSUS migration if applicable	1 week	$1,500–$3,000
Intune App Deployment Framework	Win32 packaging standards, LOB app deployment, detection rules, supersedence chains, app targeting by group	1–2 weeks	$2,250–$4,500
Device Control & USB Policy	Intune Device Control policy, WPD block rules, audit logging config, allowlist for approved devices	3–5 days	$900–$1,800
Mobile Device Management	iOS/Android enrollment profiles, compliance policies, MAM app protection, conditional access for mobile	1–2 weeks	$2,250–$4,500

Azure & Network Security

Azure environment builds, identity integration, and firewall / network security projects — scoped to deliver a production-ready, documented outcome.

Service	Scope & Deliverables	Timeline	Investment
Azure Environment Build	Subscription setup, management group/RBAC design, resource group architecture, tagging policy, budget alerts	1–2 weeks	$2,250–$4,500
Firewall Deployment & Config	New firewall deployment, zone design, security policy build, NAT rules, threat services enablement, documentation	1–2 weeks	$2,250–$4,500
SSL VPN with Entra ID SSO	VPN profile configuration, Entra ID as SAML IdP, group claim mapping, MFA enforcement, user acceptance testing	3–5 days	$1,200–$2,250
Azure Sentinel / Defender XDR	Workspace setup, data connector configuration, analytic rules, incident response workflow, initial tuning	2–3 weeks	$4,500–$7,500
Network Segmentation Project	VLAN design, inter-zone policy, firewall rule audit, segment documentation, switch/AP config coordination	1–2 weeks	$2,250–$4,500
Azure RBAC Design	Role assignment architecture, PIM configuration, admin unit design, privileged access workstation policy	1 week	$1,500–$3,000
DNS Architecture & Split-Brain	Internal DNS zone design, conditional forwarder config, split-brain DNS for hybrid environments	3–5 days	$900–$1,800
Firewall Policy Audit & Cleanup	Full rule set review, shadow/redundant rule identification, zone consolidation, policy documentation rewrite	3–5 days	$900–$1,800

AI & Copilot Deployment

Microsoft AI deployment for organizations ready to adopt Copilot responsibly. Every project addresses governance and data boundaries before turning on AI capabilities.

Service	Scope & Deliverables	Timeline	Investment
M365 Copilot Readiness Assessment	Tenant health check, data governance gap analysis, SharePoint permissions review, sensitivity label audit, readiness report	1 week	$1,500–$2,250
M365 Copilot Deployment	License assignment, Copilot enablement by group, Teams/Outlook/Word/Excel integration, usage policy config, admin training	1–2 weeks	$2,250–$4,500
Copilot Governance Foundation	Sensitivity labels, DLP policies, SharePoint oversharing remediation, retention labels, Purview audit config	1–2 weeks	$2,250–$4,500
Copilot Studio Custom Bot Build	Requirements workshop, bot design, topic/flow build, knowledge source integration, testing, Teams publish	2–4 weeks	$4,500–$9,000
Power Platform App Creation	Power Apps or Teams app build, Power Automate workflow design, publish to org app catalog, group-based deployment	2–3 weeks	$3,000–$6,000
AI Deployment Full Package	Readiness → governance → Copilot deployment → custom bot → workflow automation → user training	6–8 weeks	$12,000–$20,000

On-Demand

Ad Hoc & Break-Fix Support

On-demand hourly support at $150/hr in 30-minute increments — no minimum, no contract. Block hour packages available for recurring needs (save up to 20%). See Pricing →

Service Area	What's Covered	Typical Duration	Rate
Microsoft 365 & Identity	User & license admin, mailbox issues, Entra ID / AAD troubleshooting, SSPR, MFA config, Teams & SharePoint support, DMARC/DKIM/SPF	0.5–3 hrs	$75–$450
Intune & Device Management	Device enrollment, compliance policy fixes, Win32/LOB app deployment, Wi-Fi/VPN profile config, Windows Update / WUfB issues	0.5–2 hrs	$75–$300
Azure & Networking	VM troubleshooting, firewall config & support, SSL VPN / SAML issues, DNS diagnostics, Azure AD Connect sync errors	1–3 hrs	$150–$450
General IT & Windows Server	Active Directory support, Windows Server issues, user profile remediation, security tool deployment, hardware/software install	0.5–3 hrs	$75–$450
Copilot & Power Platform	Copilot for M365 setup, Copilot Studio bot build, governance config, Power Apps creation, app deployment & troubleshooting	2–8 hrs	$300–$1,200