Microsoft 365 Essential Security Foundation

FREE With Every Business Plan Subscription

Microsoft 365
Essential Security Foundation

Q: Is the Essential Security Foundation really free?

Yes, 100% free. It is bundled at no extra cost with every Microsoft 365 Business Plan Subscription purchased through the NHR Store. There are no hidden fees, no hourly charges, and no upsells during the setup.

Q: How long does the ESF setup take?

The ESF setup is completed within 24–48 hours of receiving your subscription order and domain access. You receive a 2-page setup guide upon completion documenting everything that was configured.

Q: Does ESF work with Business Basic and Standard plans?

Yes. ESF works with any Microsoft 365 plan (Business Basic, Standard, or Premium). It applies the 9 essential security foundations available across all plans to ensure your baseline is secure from day one.

Q: Will this disrupt my employees' daily work?

Minimal friction. Most configurations (like SPF/DKIM, sharing restrictions, and audit logs) happen entirely in the background. The only user-facing change is the one-time setup of the Microsoft Authenticator app for MFA, which takes about 2 minutes per user.

Q: What if I already bought M365 Business subscriptions from another reseller?

The free ESF setup is an exclusive value-add for subscriptions purchased directly through the NHR Store. If you have existing subscriptions from another provider and need security hardening, we offer separate security audits and hourly consulting services.

Enterprise-grade security baselines deployed in 24–48 hours — 100% free with every Microsoft 365 Business Plan Subscription purchased through our store.

SAR 0 FREE With M365 Business Plan Purchase

* No hidden fees. No hourly charges. Bundled with every M365 Business Plan.

Buy Business Plan Subscription + Get FREE Setup

24–48 Hour Setup

9 Security Foundations

Buying a Subscription Is Not Enough

Most Microsoft 365 resellers hand you activation keys and walk away. Your tenant stays in "factory settings" — exposed to attacks that target unconfigured environments.

No MFA Enforced

Without Multi-Factor Authentication, a single stolen password gives attackers full access to your email, files, and Teams.

Email Can Be Spoofed

Without SPF, DKIM, and DMARC configured, attackers can send emails pretending to be your CEO or your company domain.

Legacy Auth Open

Old protocols (POP3, IMAP) bypass MFA entirely. Attackers exploit them to access mailboxes even when MFA is technically "on."

We fix all of this — for free — when you buy your subscriptions through our store.

9 Security Foundations

What's Included in ESF

The 9 essential security foundations every Microsoft 365 tenant needs — deployed by our certified engineers in 24–48 hours.

1. MFA Enforcement

Multi-Factor Authentication enforced for all users via Microsoft Security Defaults, blocking password-only attacks.

2. Verify Domain Records

Correctly set up SPF, DKIM, and DMARC records for your custom business domain to prevent spoofing.

3. Legacy Auth Blocked

Legacy authentication protocols (POP3, IMAP, SMTP) disabled at the Exchange level — closing the #1 MFA bypass vector.

4. External Sender Banner

Configure mail flow rules to add an external sender warning banner to incoming messages from outside your organization.

5. External Sharing Restricted

OneDrive, SharePoint, and Teams sharing restricted to prevent accidental data leaks through "anyone with the link" URLs.

6. Basic MDM Policies

Enforce basic mobile device management (MDM) policies to wipe corporate data remotely if a phone or laptop is lost.

7. Anti-Spam & Anti-Phishing

Utilize built-in Exchange Online Protection settings to guard against spoofing, bulk mail, and malware.

8. Dedicated Admin Accounts

Create dedicated, cloud-only global administrator accounts that do not have active Exchange mailboxes or regular daily usage tasks.

9. Unified Audit Log

Enable the Unified Audit Log to record activity across Microsoft 365 services for security monitoring and compliance.

BONUS: 2-Page ESF Setup Guide

Every ESF deployment includes a concise 2-page PDF summarizing what was configured, what your users will experience, and how to contact support. Perfect for handing to management or auditors.

Simple 3-Step Process

From subscription purchase to protected tenant in 24–48 hours. No meetings. No scope creep. No surprises.

Buy Your Subscription

Purchase any Microsoft 365 Business Plan Subscription (Basic, Standard, or Premium) from our store. ESF is automatically included.

nhrsastore.com

Grant Access

Provide temporary admin access or GDAP. Share your domain registrar credentials (or let us guide you through DNS changes).

Day 0

Protected Tenant

Within 24–48 hours, receive your 2-page setup guide. Your tenant is secured with all 9 foundations. Access is revoked.

24–48 Hours

ESF vs. Doing It Yourself vs. Other Resellers

Security Foundation	Other Resellers	Do It Yourself	NHR + ESF (Free)
MFA Enforcement
SPF / DKIM / DMARC
Legacy Auth Blocked
External Sender Banner
Sharing Restrictions
Basic MDM / Wipe
Dedicated Admin Accounts
Unified Audit Log
Setup Time	Never	4–8 hours	24–48 hours
Cost	SAR 0 (no setup)	SAR 0 (your time)	SAR 0 (FREE)

Frequently Asked Questions

Is the Essential Security Foundation really free?

How long does the ESF setup take?

Does ESF work with Business Basic and Standard plans?

Will this disrupt my employees' daily work?

What if I already bought M365 Business subscriptions from another reseller?

Don't Just Buy Subscriptions. Get a Secured Foundation.

Every Microsoft 365 Business Plan Subscription from our store comes with 9 enterprise-grade security foundations deployed by certified engineers — completely free.

Buy M365 Business Plan Subscription + Get FREE Setup