1
IT Health Snapshot
Total Users
4
Licensed Microsoft 365 users, all with MFA
Workstations
5
Windows 11, all managed and monitored
Health Indicators
| Area | Status | Details |
|---|---|---|
| Patch Management | Current | All 5 workstations at 100% OS patch compliance |
| Endpoint Protection | Active | SentinelOne EDR on all managed endpoints |
| Backup / M365 | Active | Daily Microsoft 365 email backup (moves to Datto SaaS Protection with the new agreement) |
| Backup / File Shares | Active | Uplevel backup subscription (1 TB) for the two file shares on the office gateway |
| Identity / MFA | Enabled | MFA is turned on for all 4 licensed users |
| Network | Active | Managed gateway, switch, and access point at the office, plus a second gateway and access point for the remote VPN site. Firmware 5.2.0 on both gateways. |
| Device Lifecycle | Review | 1 of 5 workstations is over 5 years old with warranty expired. 3 of 5 run Windows 11 Home. |
Workstation Inventory
Source: RMM (active managed agents) cross-referenced with ScalePad (device age). RMM is the source of truth. Age color: under 3 yrs 3–5 yrs over 5 yrs, replace no age on file
| Device | User | Model | OS | Age / Status |
|---|---|---|---|---|
| AKDest-Admin | Char | Dell Inspiron 5400 AIO | Windows 11 Home | ~5.1 yrs, replace |
| AKDestinations | Lori | Dell Inspiron 5420 AIO | Windows 11 Home | ~3.4 yrs |
| DESKTOP-8STGPFS | Accounting | Dell Tower ECT1250 | Windows 11 Home | ~1 yr |
| AKDEST01 | Angie | MSI PRO ADL-U Cubi 5 | Windows 11 Pro | No Data |
| AKDEST02 | Char | MSI PRO ADL-U Cubi 5 | Windows 11 Pro | No Data |
2
Application Inventory
Key business applications in use at Alaska Destination Specialists, Inc.
| Application | Purpose | Vendor / Platform | Notes |
|---|---|---|---|
| Microsoft 365 | Email, Office apps & collaboration | Microsoft (cloud) | 4 Business Standard licenses, 1 with Visio Plan 2. Email backed up daily. |
| QuickBooks Pro 2024 | Accounting | Intuit | Installed on 1 workstation |
| Adobe Acrobat | PDF creation & editing | Adobe | Installed on 3 workstations |
| GoToMyPC | Remote access to an office workstation | GoTo | Licensed individually by the user and not managed by Vicinity |
3
Security Posture
Security Stack
| Control | Solution | Status |
|---|---|---|
| Endpoint Detection & Response (EDR) | SentinelOne on all managed endpoints | Active |
| Email Security | Mailprotector Cloud Filter and Safe Send (moves to Vade with the new agreement) | Active |
| Multi-Factor Authentication | Microsoft Entra ID, enabled for all 4 licensed users | Enabled |
| Conditional Access | Not included in Microsoft 365 Business Standard. Available with Business Premium. | Review |
| Backup / M365 | Dropsuite (moves to Datto SaaS Protection with the new agreement) | Active |
| Backup / File Shares | Uplevel backup subscription, 1 TB | Active |
| Firewall | Uplevel managed gateway with stateful firewall and site-to-site VPN | Active |
| Patch Management | Vicinity RMM on all managed workstations | Active |
| Microsoft Secure Score | Microsoft 365 Defender | 72 / 100 |
Key Findings
| Finding | Notes & Recommendation |
|---|---|
| MFA is on for every licensed user but not enforced by policy | Business Standard cannot require MFA through conditional access. Business Premium adds policy-based enforcement. |
| Email encryption is not available on the current plan | Business Premium lets Vicinity configure email encryption for sensitive messages. |
| 3 of 5 workstations run Windows 11 Home | Home editions cannot be joined to Entra ID or managed with central policy. Order Windows 11 Pro on future purchases. |
| 1 workstation is over 5 years old | Its warranty expired in December 2022. Plan a Windows 11 Pro replacement. |
| Secure Score is 72 with 6 open recommended actions | Open items cover the password policy, app consent settings, administrator role scope, and Teams meeting settings. Vicinity can work through these under the new agreement. |
Open Security Gaps
- Conditional access is not enforced. MFA depends on each user keeping it turned on. Business Premium allows Vicinity to require it for every sign-in.
- Email encryption is not configured. Business Premium makes it available for messages that contain sensitive information.
4
Priorities & Roadmap
Recommended initiatives and active IT goals for Alaska Destination Specialists, Inc. in the coming period.
| Initiative | Priority | Timeline | Rationale |
|---|---|---|---|
| Sign the new Vicinity managed services agreement | High | November 2026 | Puts support, security, backup, and planning under one Vicinity agreement. |
| Upgrade to Microsoft 365 Business Premium | High | With the agreement | Unlocks conditional access to enforce MFA and email encryption. |
| Move M365 backup to Datto SaaS Protection and email filtering to Vade | Medium | With the agreement | Brings backup and email security onto Vicinity's standard stack. |
| Buy Windows 11 Pro going forward and replace the oldest workstation | Medium | Next purchase cycle | Pro can join Entra ID and take central policy. The oldest workstation is over 5 years old. |
| Work through open Secure Score actions | Medium | After the agreement | 6 recommended actions are open, led by the password policy and app consent settings. |
Active Goals & Status
Goal
Target
Status
Enforce MFA by policy for every user
Conditional access in place
Pending Agreement
Raise Microsoft Secure Score
Close the 6 open actions
Pending Agreement
Standardize on Windows 11 Pro
All workstations on Pro
Not Started
Thank you, Alaska Destination Specialists, Inc.
We appreciate the trust you place in Vicinity to support your business. Our commitment is to keep your IT reliable, your data secure, and your team focused on what matters most.
Questions? Reach us anytime at support@vicinity.team · (866) 520-6414