You run the business.
We guard your IT.
Tenant Guardians is the external IT department for companies that don’t want to build their own. Server room and cloud, Microsoft 365 and Azure, Google Workspace, networks, devices and security — one accountable team, with agreed response times and work reported to the minute.
Why us
Why Tenant Guardians?
One team for all of your IT: cloud and server room alike, with deep Microsoft expertise and hands-on experience with Google Workspace, networks and infrastructure.
Expertise
A certified Microsoft partner with L3-level experience in Microsoft 365 and Azure. Equally at home in Google Workspace, virtualisation, storage and networks.
Security first
MFA and conditional access, phishing protection, backups with tested restores and incident response — in the cloud and on your servers.
Helpdesk with agreed response
Requests through Wadamo: assignee, time and a monthly report of work to the minute. Stand-by for urgent cases.
Changes in hours, not days
Accounts, licences, mailboxes, devices and policies handled fast and by template — no permission mistakes, no wasted licences.
Platforms
Platforms and tools we look after
Certified partners of the platforms we run for you.
- Hexnode
Cloud & collaboration
- Microsoft 365
- Exchange Online
- Teams
- SharePoint
- OneDrive
- Azure
- Google Workspace
- Gmail
- Meet
Security & devices
- MFA
- Conditional Access
- Intune
- Hexnode
- Microsoft Purview DLP
- Google Vault
Servers & network
- Windows Server
- Linux
- VMware
- Hyper-V
- Veeam
- Firewall
- VPN
- Wi-Fi
Helpdesk
- Wadamo
Real Stories
How We've Helped
Real projects, real results. Click to see how we helped businesses just like yours.
New Company, New Tenant
A growing startup needed their entire Microsoft 365 environment built from scratch — domain, accounts, security, and licensing — in under a week.
Situation
A newly founded company with 25 employees had no IT infrastructure. They needed a fully functional Microsoft 365 tenant with custom domain, user accounts, email, and Teams — ready for day one.
What we did
We registered and verified their custom domain, created all user accounts with role-based permissions, configured Exchange mailboxes, set up Teams channels per department, assigned the right licenses, and implemented a security baseline with MFA and Conditional Access from the start.
Result
The entire company was operational on Microsoft 365 within 4 days. Every employee had email, Teams, and SharePoint access on day one. Security was baked in from the beginning — not an afterthought.
Outbound Emails Landing in Spam
A company's marketing emails were consistently landing in spam folders. Their domain reputation was suffering and campaigns were failing.
Situation
The marketing team was sending newsletters and campaign emails through their Microsoft 365 tenant, but delivery rates had dropped below 40%. Emails were flagged as spam by Gmail, Yahoo, and other providers.
What we did
We configured SPF, DKIM, and DMARC records for their domain, set up a dedicated sending connector for marketing traffic, implemented proper email authentication headers, and worked with the team to warm up their sending reputation gradually.
Result
Email delivery rates jumped from 40% to 95% within two weeks. Marketing campaigns started generating leads again, and the domain was removed from multiple spam blocklists.
50 New Hires in One Month
A fast-scaling company needed to onboard 50 new employees across multiple departments — each with different access levels, mailboxes, and licenses.
Situation
The company was expanding rapidly. HR was sending lists of new hires weekly, each needing specific permissions based on their department and role. The existing admin was overwhelmed and making mistakes — wrong licenses, missing mailboxes, inconsistent permissions.
What we did
We took over the entire onboarding process. Created standardized templates per department, automated account provisioning with correct license assignments, configured shared mailboxes for each team, and set up proper security groups for access control.
Result
All 50 employees were onboarded without a single access issue. The process that used to take 2 hours per employee was reduced to 15 minutes. No more license waste, no more permission errors.
When the Police Called
A company received a request from law enforcement to preserve all email communications of a specific employee. They had 24 hours to comply.
Situation
Law enforcement contacted the company regarding an ongoing investigation involving a current employee. All email communications, calendar entries, and file sharing activity needed to be preserved immediately — nothing could be deleted, altered, or lost.
What we did
Within hours, we placed a Litigation Hold on the employee's mailbox, preserving all existing and future content. We configured a content search to export relevant communications, ensured retention policies wouldn't interfere, and documented the chain of custody for legal compliance.
Result
All evidence was preserved within 3 hours of the request. The company was fully compliant with the law enforcement order. When the investigation progressed, we were able to export specific date ranges and communication threads exactly as requested.
The Compromised CEO Account
A CEO's account was compromised through a phishing attack. The attacker had been silently reading emails for two weeks before anyone noticed.
Situation
The CEO clicked a convincing phishing link and unknowingly gave an attacker access to their account. The attacker created hidden inbox rules forwarding all emails containing 'invoice', 'payment', and 'wire transfer' to an external address. Two weeks later, a suspicious wire transfer request was flagged by the finance team.
What we did
We immediately revoked all active sessions, reset credentials, removed the malicious inbox rules, audited all OAuth app consents, reviewed sign-in logs to map the attacker's activity, and implemented phishing-resistant MFA. We then deployed Conditional Access policies to prevent similar attacks.
Result
The attacker was locked out within 30 minutes of detection. We identified exactly which emails were compromised and notified affected parties. The company now has proper monitoring that would catch this type of attack within minutes, not weeks.
Stopping Sensitive Data from Leaving
After a near-miss data leak, a financial services company needed DLP policies to prevent sensitive client data from being shared externally.
Situation
An employee accidentally shared a spreadsheet containing client financial data in a Teams chat with an external consultant. The data included account numbers, personal identification numbers, and transaction histories. It was caught by chance, not by any system.
What we did
We implemented Microsoft Purview DLP policies across Exchange, SharePoint, OneDrive, and Teams. Configured detection rules for financial data patterns, personal identification numbers, and custom keywords. Set up automatic blocking for external sharing of sensitive content, with user notifications explaining why their action was blocked.
Result
Within the first month, DLP policies caught and blocked 23 instances of sensitive data being shared inappropriately. Zero data leaks since implementation. The company passed their next compliance audit with flying colors.
What you get
What you get from us, regularly
- 01
Monthly report of work
What we did, to the minute. Every request has an assignee, a time and an outcome.
- 02
Licence, device and recoverability overview
Part of the monthly report and audit — you pay only for the licences people actually use.
- 03
Status of every request
You see who is working on it and where it stands.
- 04
Restore tests
We regularly test that backups can be restored — a backup you can’t restore isn’t a backup.
- 05
Monitoring and updates
We watch provider service health and keep your servers up to date.
- 06
Stand-by for urgent cases
Outside working hours too, when something is urgent.
The helpdesk runs on Wadamo — our own product. The Wadamo story ↗
Who it’s for
For companies that don’t want to run their own IT department — from dozens to hundreds of users, with the cloud, a server room or both. Microsoft is our strongest suit; Google Workspace and infrastructure we handle just as well.
Backed by OZnet
Tenant Guardians is a brand of OZnet s. r. o., a Bratislava consulting and software development company that has been building and running IT for companies since 2012 and is a certified Microsoft partner. The whole OZnet team stands behind every client: we guard your IT every day, and you see every minute of work in the report.
About OZnetFAQ
Frequently asked questions
Do we have to be on Microsoft 365?
No. We look after Microsoft 365 tenants and Google Workspace alike. Microsoft is our strongest suit; Google Workspace we handle just as well.
Do you also look after our servers and office network?
Yes. Windows and Linux servers, VMware and Hyper-V virtualisation, storage arrays and backups, firewall, VPN and Wi-Fi for staff and guests.
How do we send you a request?
Through Wadamo — on the web, by e-mail or in Teams. The request gets an assignee and a priority, and you can see its status.
How fast do you respond?
Within the time we agree with you, by priority. For urgent cases there is stand-by outside working hours too, and everyday changes to accounts, licences or mailboxes are done in hours, not days.
What do we get every month?
A report of work to the minute — what we did, who handled it and with what outcome — plus an overview of licences, devices and recoverability.
What if someone breaks into one of our accounts?
We respond to incidents within hours: we revoke active sessions, clean up malicious mailbox rules and map what happened. Then we put protection in place so it doesn’t happen again.
Do you take care of backups?
Yes. We look after storage arrays and backups (Veeam and others) with regular restore tests — a backup you can’t restore isn’t a backup.
Can you move us to the cloud?
Yes, when it makes sense: we move servers, mail and data to Microsoft 365, Azure or Google Workspace — without downtime or data loss.
Can you preserve communication for a court or the police?
Yes. Litigation Hold in Microsoft 365 and through Google Vault preserves communication and documents — nothing is deleted or altered for as long as the legal process requires.
What does the free initial check cover?
We look at your licences, backups, security and the settings someone set up “somehow”.
Get started
An external IT department for
your company
Let Tenant Guardians run your IT — from Microsoft 365 and Google Workspace to the server room and networks. You run the business, we guard the IT.
Contact us→