MFA setup for business accounts
An extra sign-in check should protect the account and be understandable to employees. We introduce MFA with a review of current sign-ins, a pilot group, help with enrolment and a procedure for replacing or losing a device.
Request an MFA review
Who this service is for
If employees access business email with only a password, or MFA has been enabled inconsistently, the first step is an account review. Administrators, shared processes and people working outside the office need particular attention. NBG TEAM helps businesses in Belgrade establish a consistent sign-in and access-recovery process.
This service covers planned identity configuration. If you suspect an account has already been compromised, the incident must be reviewed and access contained first. Enabling MFA alone does not undo every consequence. Contact IT support for an active problem.
Checks before enabling MFA
- User and administrator account inventory.
- Licences and existing sign-in policies.
- Supported authentication methods and employees’ ability to use them.
- Older clients, scanners and applications that use email.
- Lost-phone, device-replacement and emergency administrator access procedures.
Security defaults and Conditional Access are different configurations. The choice depends on licensing and business requirements. We do not apply conflicting rules or assume a subscription includes features it does not provide.
Introducing the change
A pilot based on real work
Selected users enrol a method and check email, business applications and the devices they actually use. We record obstacles before expanding the rollout.
Enrolment and short guidance
We agree a schedule for the remaining users, assist with enrolment and explain unexpected approval prompts. Employees should not approve a sign-in they did not initiate.
Account recovery is part of the plan
Your business needs to know who may request an authentication-method change and how their identity will be checked. We document the approved process and responsible contacts. Backup methods and emergency administrator access are selected according to platform capabilities and agreed rules, without sharing another person’s account.
At handover, we check the agreed sign-ins, enrolment status and outstanding exceptions. MFA is an important protection for sign-in, but it does not replace device updates, careful handling of messages or appropriate permissions.
What affects the cost
User numbers, account condition, subscriptions, older applications and on-site assistance determine the scope. Additional licences or physical security keys are agreed separately. Future enrolment can be linked to employee IT onboarding so it becomes a repeatable part of preparing a new workstation.
For the wider service, see software and microsoft 365 support. Our IT services pricing page explains billing; the scope of this project is confirmed in a proposal.