🎯 The business: you become the outside IT department for offices of 5 to 50 people. For a flat monthly fee per user you keep their computers patched and watched, run their Microsoft 365 or Google Workspace, manage security tools and backups, and answer the help desk. It is a managed service provider (MSP) in its smallest form: steady, local and sticky, but it needs real experience and a plan for nights and vacations.
At a glance
| Money to start | ≈ $2,790 to $9,510 |
| Time to the first paying client | 1 to 4 months |
| Hours a week | 40 to 50 once you have five or six clients; on call for emergencies |
| Skills that matter most | Windows and Mac support, networking, Microsoft 365, security tools, backups, calm under pressure |
| What it can pay | About $5,500 a month before tax with 60 users under contract (worked below) |
Is this for you?
It suits someone who has already worked a help desk or at an MSP for a year or two and wants their own clients. You need to fix things under pressure, explain problems to owners in plain words, and keep careful records.
It is a poor fit for a beginner or a student. Clients expect someone to answer when the server or the internet goes down at 8 a.m. on a Monday, and a security mistake in your tools can hurt every client at once. If that is you today, work part time as a technician at a local MSP first; it is the best training there is.
Who pays, and what
Owner-run offices of 5 to 50 people: dental and medical practices, law and accounting firms, engineering and construction offices, nonprofits and schools. They are big enough that downtime costs real money and too small to hire a full-time IT person.
They pay a flat monthly fee per user. One 2026 MSP pricing guide puts core managed IT (help desk, patching, Microsoft 365 admin, basic security, reporting) at about $100 to $200 a user a month, and security-heavy plans with managed detection, backup checks and stronger escalation at about $200 to $400. Hardware, software licenses and big projects are billed on top.
AI changes the job in two ways. It is a tool: ticket summaries, first drafts of documentation and scripts save technician time. And it raises the threat: the FBI’s 2025 Internet Crime Report recorded 24,768 business email compromise complaints with $3.05 billion in losses, and said businesses lost over $30 million to email fraud that used AI. Owners hear about this and want someone in charge of it.
What it takes to start
| LLC, local license, and a lawyer’s review of your client agreement | $500 to $2,000 |
| RMM and PSA software (remote monitoring and ticketing), one technician, first 3 months | $390 to $510 |
| Security tools for your own shop (endpoint protection, password manager, documentation) | $300 to $1,000 |
| Cyber liability and errors and omissions insurance, first payment (an estimate; get quotes) | $1,000 to $3,000 |
| Laptop, test machines, spare parts, cables and tools | $500 to $2,500 |
| Website, domain, business phone number | $100 to $500 |
| All-in | ≈ $2,790 to $9,510 |
RMM and PSA tools are the backbone: remote monitoring and patching (RMM), and tickets, contracts and billing (PSA). Several small-MSP tools price per technician with unlimited devices; vendor comparison guides in 2026 list Atera and Syncro at roughly $129 to $169 per technician a month, while others such as NinjaOne quote per device. These are example figures from comparison sites; check each vendor’s current price. Client licenses (Microsoft 365, security tools per device) are billed to the client.
Start to finish: the steps
1. Get the experience first. One or two years at an MSP or an internal help desk teaches you what breaks and how to talk to stressed users. CompTIA A+, Network+ and Security+ and Microsoft’s administrator certifications help you get that job and later reassure clients.
2. Pick one kind of client. Dental offices, law firms or accounting practices each use a few common programs and face the same rules. Knowing one practice-management system well wins you the next five offices that use it.
3. Set up the business and the paperwork. Form an LLC, buy cyber and errors and omissions insurance, and have a lawyer review a master services agreement: scope, response times, what is excluded, who owns the accounts, and how you hand over if the client leaves. See Business insurance.
4. Build and lock down your own stack. RMM, PSA, a password manager, documentation, endpoint protection and backup. Put multifactor sign-in on every one of these tools. Attackers go after MSP remote tools because one break-in reaches every client; the 2021 Kaseya VSA attack hit MSPs and, through them, many of their customers.
5. Write the service menu. One page: what the per-user fee covers, response times by severity, business hours, after-hours rates, and what is a project. Owners compare MSPs on this page.
6. Plan for nights and vacations. Agree in writing with another small MSP to cover each other, or buy an outsourced after-hours help desk. Promise only the coverage you can deliver.
7. Run a paid assessment. Inventory every device, account and backup, and score security against a short standard such as CISA’s small business guidance. The report shows the owner the gap and becomes your onboarding plan.
8. Onboard in 90 days. Follow the timeline above, and charge an onboarding fee, often about one month of the monthly fee. Document every password, license and vendor contact in your system, not in your head.
9. Hold quarterly business reviews. Thirty minutes: tickets, security status, devices due for replacement, and a budget for next year. This is when clients add projects and stay for years.
10. Hire before you burn out. Around 150 to 250 users, one person usually cannot keep up. Your first hire is often a part-time help desk technician.
Pricing
| Assessment, credited to onboarding if they sign | $500 to $1,500 |
| Onboarding fee (one time) | About one month of the monthly fee |
| Core managed IT | $100 to $200 a user a month |
| Security-heavy plan (managed detection, backup checks) | $200 to $400 a user a month |
| Projects outside the plan | $125 to $175 an hour (example) |
The monthly ranges come from a 2026 MSP pricing guide; the project rate is an example. Set a minimum (for example five users) and a separate price for servers. Price below the guide only on purpose and only for a while: a low per-user fee with unlimited support is how small MSPs end up working nights for free. More in Pricing AI and IT services.
The math
Take a one-person MSP about 18 months in with six clients and 60 users at $125: $7,500 a month. Costs: RMM and PSA for one technician about $170; per-device security and backup licenses for about 70 devices at about $12 each, $840; insurance $250; an after-hours partner $400; accounting software, documentation tools and marketing $340. That is $2,000, leaving about $5,500 a month before tax for 40 to 50 hours a week, plus on-call time.
Getting to 60 users usually takes a year or more, and the first client often comes from a former employer or a friend’s office. Set aside about a quarter to a third of profit for tax. See Small business taxes.
Getting customers
Who to approach first. People who have already seen your work: managers at offices you supported in your old job (check your employment agreement for a non-solicitation clause first), your own dentist, lawyer or accountant, and friends who run offices. Then referral partners who meet unhappy IT buyers: accountants, copier and phone vendors, office furniture and cabling installers, and larger MSPs that turn away offices under 20 users.
The first ten customers. Pick one industry and list 50 offices of 5 to 50 people within 30 minutes’ drive. Send 30 personal letters or emails offering a paid assessment, make 15 follow-up calls, attend two meetings of that industry’s local association, and give one talk on email fraud. As an example over about six months: 8 to 10 conversations, 3 or 4 assessments, and 2 signed clients. Each client is worth years of fees, so this pace is normal.
Hi Dr. Patel, I run a small IT company that looks after dental offices around Riverside: computers, Microsoft 365, backups and security, for one monthly fee. Owners usually call me after something has gone wrong, like a backup that turned out not to work or an email account that started sending fake invoices. I offer a one-day assessment of your office for $750. You get a written list of what is protected, what is not, and what it would cost to fix, whether or not you hire me. If it would help, I can come by after hours so your schedule isn’t affected.
Channels, best to worst for this customer.
1. Referrals from accountants, vendors and existing clients: trust carries over, and these clients stay longest.
2. Industry associations (local dental society, county bar, CPA chapter): one sponsorship or talk reaches many offices with the same needs.
3. Chamber of commerce and referral groups: steady local introductions.
4. Google Business Profile: people search "IT support near me" in a crisis; reviews decide the call.
5. LinkedIn: short, specific posts about real incidents (with details removed) build credibility with owners.
6. Marketplaces such as Upwork: rarely useful; managed IT clients want someone local they can meet.
7. Paid ads: last. Clicks for "managed IT services" are expensive and bring price shoppers.
Case studies and referrals. After onboarding, ask permission to write a one-page story: "12-person dental office: MFA on every account, backups tested monthly, no unplanned downtime since." Use numbers you measured, never promises. Ask for one introduction at each quarterly review, and keep a referral thank-you simple and disclosed. More in Launch and marketing playbook.
Running it week to week
Each morning: check RMM alerts, failed backups and security alerts before clients arrive. Work tickets by severity, and log every one, even the two-minute ones. Weekly: approve patches, review open tickets older than three days. Monthly: test one restore per client and check that every account still has multifactor sign-in. Quarterly: business reviews. Keep your own tools patched and audited; you are the most valuable target in your clients’ supply chain.
Rules to check
No state license is needed to provide IT support in most places, but check your city and state for a general business license. The real rules come through your clients. Every state has a data breach notification law, and if a breach happens through your tools, your client may have to notify customers and sometimes the state attorney general. Medical and dental clients make you a HIPAA business associate: you need a signed business associate agreement, and the HIPAA Security Rule requires them to have a data backup plan, a disaster recovery plan and security awareness training for all staff. Tax preparers fall under the FTC Safeguards Rule, which requires multifactor sign-in, encryption of customer information, and notice to the FTC within 30 days of a breach involving 500 or more people. Cyber insurers often require multifactor sign-in, backups and training before they will cover your client, and they may ask you to confirm settings on the application; answer only what you can prove. You are not your client’s lawyer or compliance officer; report what is set up and let them decide what the rules require. See Contracts, client data and AI rules.
What goes wrong
You underprice with "unlimited support" and one needy client eats your week; define scope and response times. A backup that "ran" fails on restore; test restores monthly. Your own remote tool gets compromised; lock it down harder than any client system. You promise 24/7 and then go on vacation; arrange cover in writing. A client refuses multifactor sign-in for the owner’s account; get the refusal in writing, because it will matter after a breach. And growth outruns you; hire before quality slips, not after a client leaves.
Questions people ask
How much do managed IT services cost per user?
One 2026 pricing guide puts core managed IT at about $100 to $200 a user a month and security-heavy plans at $200 to $400. Licenses, hardware and projects are usually extra.
How much does it cost to start an MSP?
For a one-person MSP, roughly $2,800 to $9,500: insurance, a lawyer-reviewed agreement, RMM and PSA software, security tools for your own shop, and equipment. The bigger cost is the months before you have enough clients.
What certifications do I need to start a managed IT business?
None are legally required. CompTIA A+, Network+ and Security+ and Microsoft’s administrator certifications are common and help with hiring and client trust. Experience at an MSP matters more than any certificate.
Can one person run an MSP?
Yes, up to roughly 150 to 250 users depending on the clients, if you have a written after-hours arrangement with another provider. Beyond that, plan to hire.
Will AI replace managed IT providers?
It changes the work more than it removes it. AI speeds up ticket notes, scripts and documentation, and it also makes phishing and payment fraud more convincing, which raises demand for someone responsible for security.
Free help
CISA’s Cyber Guidance for Small Businesses and its Cyber Essentials toolkit give a plain checklist you can build your assessment on, and CISA’s free Cyber Hygiene scanning checks a client’s internet-facing systems. Microsoft offers Microsoft 365 Lighthouse to partners in its Cloud Solution Provider program for managing many small tenants. SCORE mentors and Small Business Development Centers help with business plans, pricing and contracts at no cost. More in Free help directory.
Checked in November 2026: FBI 2025 Internet Crime Report figures, FTC Safeguards Rule and HIPAA Security Rule text, CISA’s small business guidance, and Microsoft’s Lighthouse requirements. MSP pricing and RMM and PSA tool prices come from pricing guides and comparison sites, not vendor pages; check current prices before you budget.