A Microsoft 365 tenant set up by an admin who clicked through the defaults will leak documents, reject your staff’s phones, and quietly share files with anyone who has the link. The configuration below is the difference.
Pick the tier before you buy licences
| Tier | Indicative range, INR per user per month | Includes | Right for |
|---|---|---|---|
| Business Basic | Roughly ₹130 to ₹200 | Exchange, Teams, SharePoint, web and mobile apps, 1 TB OneDrive | Teams already on Outlook and not running Office locally |
| Business Standard | Roughly ₹650 to ₹850 | Basic plus full Word, Excel, PowerPoint for desktop | Most Indian SMEs running accounting and GST workflows |
| Business Premium | Roughly ₹1,100 to ₹1,700 | Standard plus Intune, Defender for Office, Azure AD P1 | Regulated or field-force businesses |
Plus 25 to 30 percent more for annual commitment. These are list prices that change, so confirm current rates before budgeting.
Business Standard is the default recommendation for Indian SMEs: most run desktop Office alongside Tally exports and GST filing spreadsheets. Business Basic looks cheaper until someone needs Excel offline.
The setup sequence
- Buy the licences through the admin centre or a CSP reseller. Both work; a reseller is easier for GST invoicing and input credit.
- Add your domain under Settings, then Domains, then Add domain. Use a
.co.inor.indomain if your business warrants it. - Verify it with the TXT record Microsoft gives you. This is DNS-based and can take up to an hour to appear.
- Automate account creation. Point the admin centre at your own domain so new staff get addresses automatically, not one by one.
- Connect your existing email using the Connectors and Migration wizards in Exchange Online.
- Set MX, autodiscover and DMARC records as the admin centre specifies. Getting these wrong is why mail bounces and lands in spam.
- Turn on shared mailboxes for accounts, support and sales, rather than using an individual’s address as a company address.
What actually needs configuring in the admin centre
Most of these menus can stay untouched. The ones that matter:
- Security, then Policies, then Password policy — set an 8-plus character minimum with complexity and a 12-month maximum age
- Security, then Policies, then Sign-in security — enforce MFA for everyone, including admins
- Settings, then Org parameters, then Shared mailboxes — set the mailbox size cap and a deleted-items retention period
- Settings, then Org parameters, then Email authentication — run the high-volume email check before you rely on bulk sending
- Compliance, then Policies, then Data loss prevention — create a rule for card numbers, Aadhaar and PAN patterns
- Users, then All users, then Bulk actions — assign licences rather than letting people self-assign
The three misconfigurations that bite
External sharing defaults. If SharePoint and OneDrive default to “anyone with the link”, a client uploads a quotation and your price list goes public. Set organisation-wide external sharing to “users in your organisation only”, then grant exceptions per site.
MFA rollout. A self-serve method on day one generates support calls, and backing off then leaves you with no MFA at all. Enforce it with a few days of notice and support people by phone on day one. Admin accounts should use a hardware key, not an SMS code.
Shared mailboxes. By default a shared mailbox is not a full sign-in account. If someone must log into it directly, it needs a licence — that is where the invoice shock comes from. Decide which shared mailboxes are licensed and which are accessed only through delegation.
One more worth catching early: the autoforwarding rule, a legitimate exfiltration route in most incidents.
If staff emailing customers from their phone hit spam folders, the cause is almost always authentication records, not licensing. Business email setup in Delhi covers SPF, DKIM and DMARC.
Data residency in India
Microsoft 365 customers can request that data be held in an Indian datacenter region, available on the relevant enterprise SKUs. Worth asking for when you handle customer personal data, and it is not the default. Be honest about the limits: it does not change what the product does, and eligibility must be confirmed at purchase time. For most SMEs the practical reasons are customer questionnaires and a defensible answer to “where is our data”.
FAQ
Is Microsoft 365 or Google Workspace better for an Indian SME? It usually comes down to whether your team lives in Excel or Google Docs, and whether you need Tally integration. Still deciding? Google Workspace setup for small businesses compares from the platform side.
How do I migrate mail from my current provider? Use Exchange Online’s migration tools in the admin centre. Expect a few hours for a typical SME mailbox history; export PSTs from Outlook first if you are elsewhere.
Do I need Business Premium? Rarely, for a 10 to 50 person company. Business Standard with MFA enforced and one data loss prevention rule covers most of what Premium adds.
What does MFA do to employees who share phones? It breaks the habit of shared logins, which is the point. Set up individual accounts with an authenticator app, and expect a week of support calls.
Can I claim GST on the subscription? Yes, standard business input tax credit if you are GST-registered. Buy through a registered Indian reseller so you get a proper tax invoice.
How long does a full setup take? A single-domain tenant with mail migration and security baseline: two to four working days. Add file migration and training, budget a week.
Get Microsoft 365 deployed
24Bit System deploys and manages Microsoft 365 tenants for Indian SMEs — mail migration, shared mailbox design, security baselines — as part of ongoing Microsoft 365 and Google Workspace management. Call +91 7840002466.
