Changing IT providers should not put your email, files or Microsoft 365 access at risk. But for many small businesses, the worry is real: What if the old provider controls the admin account? What if email stops working? What if no one knows where the domain name is managed?
The good news is that a clean handover is very achievable when it is planned properly. The key is to confirm ownership and access before anyone starts disconnecting services.
This guide is written for Australian small business owners who rely on Microsoft 365 for Outlook, Teams, SharePoint, OneDrive and everyday work. It explains what to check, what to ask for, and how to avoid being locked out during the move.
Start with the right mindset: this is a handover, not a fight
If you are leaving an IT provider, it may feel uncomfortable asking for access and documentation. But your business owns its accounts, domain name, data and records. A professional provider should support a smooth handover.
Most switches go better when they are handled calmly and in writing. Avoid making sudden changes or cancelling services until the new provider has confirmed what is in place.
Before anything is moved, agree on:
- The date and time for the handover
- Who is authorised to request changes
- Which systems are managed by the current provider
- Which accounts and passwords will be transferred
- What support is available after the handover
For a business that relies on email, even a few hours of confusion can disrupt quotes, invoices, bookings and customer replies. A clear plan prevents that.
Confirm who controls Microsoft 365 admin access
The most important item is Microsoft 365 admin access. This is the control panel for your Microsoft 365 setup. It manages users, licences, email settings, security settings and access to business data.
At minimum, your business should have a working admin account that is not tied to your outgoing provider’s personal email address. Ideally, it should be a dedicated business account, such as admin@yourbusiness.com.au, with the password and sign-in protection controlled by your business.
Ask these questions before you switch
- Who has Global Administrator access? This is the highest level of Microsoft 365 admin access.
- Does the business have its own admin account?
- Is that admin account protected by multi-factor authentication?
- What phone number or app is used for the sign-in approval?
- Are any admin accounts linked to the current provider’s email or mobile?
- Is Microsoft 365 billed directly to the business or through the current provider?
If your provider is the only one with admin access, do not cancel the service before this is fixed. You need the current provider to either hand over access or create a proper admin account for the business.
Your new IT provider should test the admin access before the handover is considered complete. That means signing in, confirming the admin role, checking security settings and making sure access recovery details are correct.
Do not overlook DNS and your domain name
Your domain name is your business address on the internet, such as yourbusiness.com.au. DNS is the set of records that tells the internet where to send your email and website traffic.
If DNS is changed incorrectly, email can stop arriving or your website can go offline. This is one of the most common causes of disruption during an IT provider change.
What to confirm
- Who manages your domain name registration?
- Where is the DNS hosted?
- Who has the login details for the domain and DNS account?
- Are the recovery email address and mobile number under your control?
- Are Microsoft 365 email records documented?
- Are website, accounting, booking or marketing records documented?
For Australian businesses, the domain name may be held with a registrar, web designer, old IT provider or hosting company. It is common for no one in the business to know who controls it until a change is needed.
Before switching providers, make sure your business has access to the domain registrar account or a clear path to obtain it. If your outgoing provider manages DNS, ask for an export or screenshot of the current DNS records before any changes are made.
Check backups before making changes
Many business owners assume Microsoft 365 automatically gives them a full backup of email, OneDrive and SharePoint. Microsoft provides strong platform availability, but that is not the same as having a separate business backup you can easily restore from.
Before switching providers, ask what is currently backed up and how restores work. This matters if someone deletes files, an account is compromised, or data is lost during a rushed change.
Ask for backup details in plain English
- Is Microsoft 365 email backed up separately?
- Are OneDrive and SharePoint files backed up?
- How often do backups run?
- How far back can files or emails be restored?
- Who owns the backup account?
- Will backups remain available after the provider changes?
- Has a restore been tested recently?
If backups are provided through the outgoing IT company, they may stop when the service ends. That does not mean the provider is doing anything wrong, but you need to know before the cancellation date.
A safe approach is to have the new provider confirm current backup coverage, put replacement backups in place if needed, and only then end the old service.
Get documentation before the relationship ends
Good documentation is not just an IT convenience. It helps your business avoid delays, repeat costs and preventable outages.
At a minimum, ask for a handover document that includes:
- Microsoft 365 Microsoft 365 setup name and admin accounts
- List of users and assigned licences
- Domain registrar and DNS hosting details
- Current DNS records
- Backup services and retention details
- Devices under management, such as laptops and desktops
- Security tools in use, such as antivirus or email filtering
- Internet, phone and cloud service account details
- Shared mailboxes, distribution lists and Teams setup
- Any known issues or upcoming renewals
You do not need to understand every technical setting. You just need enough information so the new provider can take over without guessing.
If your outgoing provider refuses to provide passwords in plain text for security reasons, that is understandable. They can still transfer access safely by creating new admin accounts, changing recovery details, or using a secure password handover process.
Plan the order of the change
A provider switch should happen in the right order. The mistake is cancelling first and asking questions later.
A safer order is:
- Choose your new provider and authorise them to review the setup.
- Confirm Microsoft 365 admin access.
- Confirm domain and DNS access.
- Review backups and put replacements in place if needed.
- Collect documentation from the outgoing provider.
- Check user accounts, licences and security settings.
- Agree on a handover date.
- Remove old provider access only after the new provider confirms control.
This approach reduces the chance of email outages, locked accounts or missing information. It also gives both providers a clear process to follow.
Avoid lockout when changing passwords and admin accounts
It is normal to change admin passwords when you switch providers. It is also normal to remove the old provider’s access once the handover is complete. The risk is doing this too early or without checking recovery options.
Before removing any access, confirm that:
- Your business has at least two working admin accounts
- Multi-factor authentication is set up on business-controlled phones or apps
- Recovery email addresses belong to the business
- Passwords are stored securely, not in a spreadsheet or email
- The new provider has tested the access they need
- The outgoing provider’s accounts are removed or reduced after the handover
Having two admin accounts is important. If one account is locked, lost or affected by a staff change, the second account can prevent a full lockout.
Do not use a standard staff account as the only admin account. If that person leaves or their mailbox is compromised, your whole Microsoft 365 setup can be at risk.
Check billing and licences
Microsoft 365 may be billed directly to your credit card, through a Microsoft partner, or as part of a bundle from your IT provider. Before switching, confirm how licences are paid for and when they renew.
Ask your current provider for a list of active licences and which users they are assigned to. You may find old accounts still being billed, or users on plans they no longer need.
If licences need to move from one billing arrangement to another, your new provider should plan this carefully. The aim is to keep users active and avoid interrupting email, Teams or file access.
Watch for connected services
Microsoft 365 often connects to other business systems. These may include accounting software, scanners, booking tools, customer management systems, website forms or email marketing platforms.
If these connections use old passwords, admin accounts or email settings, they can break during a provider change. This is especially common with printers that scan to email, shared mailboxes, and website contact forms.
Ask your new provider to check the systems that send or receive email through Microsoft 365. It is much easier to fix these before the old provider is removed.
What if the current provider is unresponsive?
Sometimes the outgoing provider is slow to reply, the relationship has broken down, or the business owner does not know what was set up years ago. Stay calm and keep communication in writing.
If you can still access Microsoft 365 as an admin, your new provider may be able to take over without much involvement from the old provider. If you do not have admin access, the options depend on how the account was set up and what proof of ownership is available.
Do not try random changes if you are unsure. A careful review is better than risking email downtime or losing access to business files.
Final checklist before you switch
Before ending the old IT agreement, make sure you can tick these off:
- Business-controlled Microsoft 365 admin access is confirmed
- At least two admin accounts are working
- Domain name and DNS access are confirmed
- Current DNS records are documented
- Microsoft 365 backups are confirmed or replaced
- Licensing and billing are understood
- Important connected services have been checked
- Outgoing provider access is removed only after handover
- Passwords and recovery details are under business control
Switching IT providers does not need to be stressful. The main thing is to confirm ownership, access and backups before anything is cancelled.
Need a second opinion before you move?
If you are thinking about changing IT providers and are worried about Microsoft 365 access, JCPIT Support can review your setup before you make a decision.
We offer a no-fee second opinion and free security check for Australian small businesses. We will help you understand who controls your Microsoft 365 admin access, DNS, backups and key settings, in plain English.
Contact JCPIT Support before you switch so you can move providers without losing access to the tools your business relies on.
