FREQUENTLY ASKED QUESTIONS
Questions we hear before every engagement
Straight answers to the questions we hear most from IT leaders and business owners evaluating Microsoft Intune, Defender and Microsoft 365 services.
Working with Lumeplex
Lumeplex is a Microsoft-focused IT consultancy headquartered in Dallas–Fort Worth. We design, deploy and manage Microsoft Intune, Microsoft Defender, Entra ID and Microsoft 365 for organizations that want enterprise-grade endpoint management and security without an enterprise-size IT department.
Organizations running (or moving to) Microsoft 365 that want enterprise-grade endpoint management and security, from a 25-person firm to a multi-site enterprise. Our typical client has a small internal IT team or a managed service provider without deep Intune and Defender expertise. We also partner with MSPs and IT firms that need a Microsoft endpoint specialist on a project.
Everywhere Microsoft 365 runs. Lumeplex is headquartered in Dallas–Fort Worth, and nearly all Intune, Defender and Microsoft 365 work is delivered remotely, so we serve clients across the United States. For DFW-area clients we are also available on-site when it helps.
With a 30-minute strategy call. We review your current environment and goals, then propose either a fixed-scope project (for example an Intune deployment or Defender rollout) or an ongoing managed service. You get a written scope and timeline before any work begins.
Most MSPs are generalists covering everything from printers to phones. Lumeplex specializes in one thing: the Microsoft endpoint and security stack. Every engagement is led by a senior consultant with over 25 years in IT, and we hand over documentation and knowledge transfer so your team is not dependent on us.
Intune and endpoint management
Group Policy only applies when a device is on the corporate network or VPN. Intune manages Windows, macOS, iOS and Android devices anywhere over the internet, enforces compliance before granting access to company data, and removes the need for imaging and on-prem infrastructure. Most organizations run both during a transition.
Yes. Using co-management, existing SCCM-managed devices enroll in Intune and workloads move over in stages, with no wipe and no user downtime. We assess your apps and policies first, then migrate in waves.
A typical small to mid-size deployment takes 4 to 8 weeks from kickoff to pilot sign-off, depending on the number of platforms, apps and existing policies. We pilot with a small group before rolling out company-wide.
Microsoft 365 Business Premium (up to 300 users) includes Intune, Defender for Business and Entra ID P1 and is the most cost-effective option for small and mid-size organizations. Larger organizations use Microsoft 365 E3 or E5. We review your licensing during the strategy call so you do not pay for features you will not use, and we can supply licenses through our Microsoft CSP program.
Security
Defender for Endpoint goes beyond antivirus with endpoint detection and response, attack surface reduction rules, vulnerability management and automated investigation, and it is likely already included in your Microsoft 365 license. Many organizations pay for a third-party antivirus while leaving a stronger tool switched off.
Never trust a connection just because of where it comes from. In Microsoft 365 that means Conditional Access policies that check who the user is, whether their device is compliant and how risky the sign-in looks before granting access. We implement it incrementally so it protects without disrupting work.
Microsoft 365 Copilot and hardware
Copilot can only surface what users already have permission to see, so the real question is whether your file permissions and sensitivity labels are in order. Our Copilot readiness assessment checks data exposure, licensing and governance before you roll it out to a pilot group.
Yes, for businesses, schools and non-profits. Devices are registered to your Autopilot or Apple Business Manager tenant before they ship, so they arrive ready to enroll with no hands-on setup.
GET IN TOUCH
Still have a question?
Ask it here. A Lumeplex consultant will reply within one business day, or call (940) 290-7991.
