🎯 The business: you are the IT person for small offices that don’t have one. You run their Microsoft 365 or Google Workspace accounts, lock down sign-ins and email, set up backups that actually restore, train staff to spot AI-written scams, and roll out Copilot or Gemini without exposing files nobody meant to share. You start with fixed-price checkups and cleanups, move to a monthly per-user plan, and grow toward full managed IT.
AI makes this trade busier, not smaller. Every office now has more accounts, more devices and more AI tools to configure, and phishing emails no longer give themselves away with bad grammar. The idea pages behind this plan are Microsoft 365 and Google Workspace admin and Managed IT for small offices.
Who this suits, and who it doesn’t
It suits someone who already fixes things for family and coworkers, and likes it. Help desk staff, school and nonprofit IT volunteers, and people with CompTIA A+, Network+ or Security+ study behind them have a head start. The core skills are accounts and sign-in security, email security (the SPF, DKIM and DMARC records that stop others from sending as you), sharing permissions, backups and patient explaining.
It does not suit someone who needs predictable hours. Offices call when something breaks, and something breaks on the morning of a deadline. If you cannot be reachable during business hours, sell projects only and say so plainly.
The demand is in the surveys. In Bluevine’s April 2026 survey of 942 small-business owners, data security and privacy was the top worry about AI, at 33%, up from 23% a year earlier. In Goldman Sachs’ March 2026 survey of its small-business alumni, the biggest AI challenges were data privacy and security (50%) and lack of technical expertise (49%). Those owners need a person, not another app.
The offer ladder
Checkup, $300 to $750. A 90-minute review of the office’s accounts, sign-in settings, email security records, sharing, devices and backups, followed by a one-page report: what is fine, what is risky, and three fixes in order with prices. Let the client keep the report whether or not they hire you further.
Cleanup, $1,000 to $3,000. Turn on multi-factor sign-in for everyone, set up the email security records, remove old accounts, tidy who can see which folders, fix licenses the office pays for but doesn’t use, and write down how it all works. This is a project with a clear end.
Admin plan, $15 to $40 per user a month. New staff set up and old staff removed the same day, updates checked, settings kept tidy, a monthly note on what you did, and help by email or phone in business hours.
Add-ons sold to the same office: security awareness training with phishing tests (see Security awareness training), tested backups (see Cloud backup and ransomware recovery), and an AI rollout.
The AI rollout job. Copilot in Microsoft 365 and Gemini in Google Workspace work with the files each person can already open. In an office where "everyone can see everything", that means an assistant can surface salary sheets or client files to anyone who asks the right question. So a rollout starts with the sharing cleanup, then licenses and data settings, then a short staff session on using the tools well (AI training workshops for small teams) and a one-page AI-use policy (AI-use policy consulting). For budgeting, Google lists Gemini Enterprise Business from $21 a seat a month; secondary sources put Microsoft’s Copilot Business at about $21 a user a month list. Check Microsoft’s current price before you quote it.
Managed IT, $100 to $250 per user a month. Full support and security for the whole office, usually with monitoring tools on every device. One pricing guide reported an average of about $145 per user a month from a survey of 412 providers and buyers. This is where the plan leads after a year or two, once you have tools, insurance and someone to cover when you are sick.
What it costs to start
| LLC and city or county license | $150 to $500 |
| Your own Microsoft 365 or Google Workspace business account, for email and a test setup (check current prices) | $100 to $300 a year |
| Password manager and two hardware security keys (an estimate) | $50 to $150 |
| Certification study and exam, optional at first (an estimate) | $0 to $500 |
| Cyber liability and errors and omissions insurance, first year (an estimate; get quotes) | $500 to $1,500 |
| Remote support and monitoring tools, first months (an estimate) | $0 to $300 |
| Simple website and domain | $50 to $150 |
| All-in | ≈ $850 to $3,400 |
Insurance is the line not to skip. You will hold admin access to other people’s businesses, and a mistake or a breach can cost them money. Full managed IT later needs more: monitoring and ticketing software, a security stack and higher insurance limits, about $2,000 to $10,000 by the research estimate for this section. Don’t buy that before you have monthly clients to pay for it. See Business insurance.
The first 90 days
Days 1 to 30: get ready. Set up your own business tenant and practice on it: multi-factor sign-in, email security records, sharing rules, a backup and a test restore. Register the business, buy insurance, and get a services contract that includes a written authorization to access client systems. Write your checkup as a checklist, so every office gets the same review.
Days 20 to 45: test the checkup. Run it free for two friendly offices, such as a relative’s business or a nonprofit you know. Time it, fix the checklist, and turn the results into a sample report with the names removed.
Days 30 to 80: reach out. Contact 30 offices of 5 to 25 people and four referral partners (details below). Give one talk on AI-written phishing and voice-clone scams. Book paid checkups from about day 45.
Days 55 to 90: deliver and convert. Turn checkups into cleanups, and cleanups into monthly plans. On day 90, a good position is six or more conversations, three or more paid checkups, two cleanups and one or two offices on a plan.
Pricing and a worked month
| Security checkup with a written report | $300 to $750 (example) |
| Cleanup project: sign-in, email security, sharing, licenses | $1,000 to $3,000 (example) |
| Monthly admin plan | $15 to $40 per user (estimate) |
| Security awareness training and phishing tests | $2 to $5 per user a month (what IT providers commonly charge, per training-vendor guides) |
| Backups | $500 to $2,000 setup, then $10 to $30 per device a month (estimate) |
| Copilot or Gemini readiness and rollout | $1,500 to $4,000 (example) |
| Managed IT | $100 to $250 per user a month (provider price guides) |
| Work outside the plan | $75 to $150 an hour (estimate) |
Per-user pricing is how offices already think about software, so it is easy to understand, and it grows with the client. Write down what a plan covers and what it doesn’t. Home devices, the owner’s personal phone and a new office build-out are usually separate. Set a minimum, such as five users, so a two-person office doesn’t take the same time as a ten-person one for a fraction of the fee. More in Pricing AI and IT services.
A worked month. Here is an example month for three offices with 8, 10 and 12 staff, 30 users in all. Admin plans at $35 per user bring $1,050. Phishing training at $3 per user brings $90. Backups for 20 computers at $15 bring $300. One cleanup project for a new office brings $1,800. That is $3,240.
Costs: about $260 for resold tools (backup storage, the training platform and monitoring), $120 set aside for insurance, $60 for your own software and $60 for marketing, $500 in all. That leaves about $2,740 before tax.
The recurring part, $1,440 a month, is small at this stage, but it grows with every office you add and rarely leaves. Offices tend to keep an IT person who answers the phone. Set aside a share of profit for taxes; see Small business taxes.
The first ten clients
Who first. Offices whose owners already know you: your accountant, insurance agent, dentist, a former employer, a relative’s business, a place of worship’s office. They will let you in to run a checkup because they trust you, not because of your website.
The plan, with numbers. List 30 offices of 5 to 25 people in two or three kinds of business, such as accounting, law, clinics and nonprofits. Over about seven weeks: send 30 short letters or emails, call the 12 most likely, give one free talk on AI-written phishing and voice-clone scams at a chamber or library, and meet four referral partners. Expect 6 to 10 conversations, 3 to 5 paid checkups, 2 or 3 cleanups and 1 or 2 monthly plans by day 90. The rest of the ten come from referrals and the partners.
Hi Ms. Reyes, I’m an IT consultant here in Lakewood and I work with offices of 5 to 25 people. Fake invoices and login pages are much harder to spot now that AI writes them, and most of the fixes are settings an office already owns: sign-in protection, email security records and who can see which folders. I offer a 90-minute checkup for $450 with a one-page written report, and the report is yours whether or not you hire me for anything else. Would a weekday morning in the next two weeks work? Thanks, Alex Kim, 555-0129
Channels, best first, for small-office IT:
| Warm introductions and offices you already know | Trust is the whole sale when you hold the keys |
| Referral partners: bookkeepers, insurance agents who sell cyber policies, copier and phone vendors, web designers | They hear about IT problems first |
| Talks on scams and AI at chambers, libraries, trade groups | Owners come up afterwards with their own stories |
| Letters and emails to a list of 30 offices | Slow; works best with a follow-up call |
| Google Business Profile with reviews | People search "IT support near me" after a bad day |
| Useful for office managers and professional firms | |
| Marketplaces | Poor fit; this work is local and trust-based |
| Paid ads | Last, capped, aimed at "IT support" searches in your area |
Turn clients into proof. After a cleanup, show the owner the before-and-after list in plain words: "9 of 12 accounts had no second sign-in step; now all 12 do." Ask for a Google review and permission to describe the work without the firm’s name. Ask each office manager which other offices they talk to. The full playbook is in Launch and marketing playbook.
Systems, tools and help
Access. Get written authorization before you touch any client system. Keep every client’s admin logins in a password manager, with a separate vault per client and multi-factor sign-in on your own account. Never keep client passwords in email, texts or notes. Use your own named admin account in each tenant, not a shared one, so every change is traceable.
Records. For each client: a list of users, devices, licenses and key settings, a dated change log, and a short "how this office works" page that someone else could pick up if you were sick. This is also what you hand over if a client leaves, which makes clients more willing to sign.
Routines. A new-hire and leaver checklist, run the same day. A monthly check of sign-in alerts, backups (with a test restore each quarter) and updates. A one-paragraph monthly note to each client. A single inbox or simple ticket form for requests, so nothing lives only in your text messages.
Tools. Start with the admin centers Microsoft and Google already provide, a password manager and a reputable backup service. Add remote monitoring and ticketing software when you have enough monthly users to cover its per-device cost. Both Microsoft and Google run partner and reseller programs; join once you resell licenses. The full tool list is in Your AI toolkit and what it costs, and the contract terms (data, liability, termination) are in Contracts, client data and AI rules. If a client is a clinic, you will likely be a HIPAA business associate and need a signed BAA before you start.
Free help. CISA, the federal cybersecurity agency, publishes free guidance written for small businesses that you can use in checkups and talks. Microsoft and Google both publish free admin training. SCORE mentors and your local Small Business Development Center help with pricing and contracts. CompTIA certifications give clients and insurers something to check. The list is in Free help directory.
An incident partner. Decide before it happens who you call if a client is hit by ransomware or an account takeover that is beyond you. Ask your own insurer, and each client’s cyber insurer, what incident help their policy includes. Write the name and number into each client’s records.
The first hire. Usually a part-time technician for on-site visits and new-hire setups, often a student from a campus help desk program (see Campus IT help desk). Give them their own accounts with only the access they need. A rule of thumb: hire when you have about 60 to 80 users on plans or when you miss a day’s requests because you were on site elsewhere. Check whether they are an employee or a contractor under IRS and state tests before you pay them.
Risks, and when to pivot
The main risks. A breach on your watch, even one you could not have stopped, lands on your reputation; written scope, insurance and a record of what you recommended protect you. Being the only person who can fix things makes holidays and sick days hard. Scope creeps to the owner’s home printer and their children’s tablets; price it or say no. Tool costs per device can arrive before the revenue does. And Microsoft and Google change their admin settings often, so plan time each month to keep up.
When to change course (rules of thumb):
If offices like the checkups but won’t commit to monthly plans, sell projects plus prepaid blocks of hours. That is a fine business too.
If you dislike being on call, drop the monthly plans and specialize in projects: checkups, cleanups, backups and Copilot or Gemini rollouts.
If your best days are the training sessions, move toward the studio in An AI automation studio, which leans on workshops and automation.
If most of your calls come from older home users, not offices, that is its own business: Tech help for seniors and home users.
And if demand outgrows you, hire a second technician and move toward managed IT pricing, or take an MSP job where someone else carries the on-call phone. The experience is worth the same either way.
Questions people ask
How much do small businesses pay for IT support?
Managed IT price guides put full support at about $100 to $250 per user a month, with one survey average of about $145. Lighter admin plans for Microsoft 365 or Google Workspace are commonly estimated at $15 to $40 per user a month.
Do I need certifications to start an IT business?
No license is required to do IT work for offices. Certifications such as CompTIA A+ or Security+ help clients trust you and can help with insurance, but insurance and a clear contract matter more on day one.
What should I check before turning on Copilot or Gemini?
Who can see which files. These assistants work with what each user can already open, so clean up sharing first, then set licenses and data settings, train staff and write a short AI-use policy.
Checked in November 2026: the Bluevine and Goldman Sachs surveys, price ranges from provider and training-vendor guides, and Gemini prices on Google’s page. Microsoft Copilot prices came from secondary sources; confirm them with Microsoft before quoting. Re-check AI add-on prices each quarter.