Alpha it Solutions

Alpha it Solutions Managed IT, cyber security & web design in London & Essex. Also on Telegram: t.me/AlphaITSolutionsUK
(1)

Who in your business can install software on their own laptop?If the answer is everybody, that's normal and it isn't rea...
31/08/2026

Who in your business can install software on their own laptop?

If the answer is everybody, that's normal and it isn't really anybody's fault. The first account created on a new Windows PC is an administrator, and whoever signed the company up for Microsoft 365 was made a Global Administrator of the whole tenant on the spot. Nobody decided any of it.

It matters because software runs with the rights of whoever is signed in. A bad attachment opened on a standard account can rummage through that person's own files. Opened on an admin account, it can install a service, switch off protection and reach the other machines.

Today's guide is about the fix, which is smaller than people expect. Two accounts for the same person rather than two people. It also covers the local administrator password that's usually identical on every machine in the office, and what Microsoft gives away free to sort that out.

https://www.alphaitsolutions.uk/blog/admin-rights-small-business/

Also on Telegram: t.me/AlphaITSolutionsUK

Why the account you read email with should not be the one that can change everything, how many Microsoft 365 Global Admins to keep, and what Cyber Essentials asks.

Every business has the cupboard. Four laptops nobody has switched on since the Windows 10 deadline, a desktop labelled "...
27/08/2026

Every business has the cupboard. Four laptops nobody has switched on since the Windows 10 deadline, a desktop labelled "reception, do not move", and a bare hard drive somebody pulled out of a server in 2019.

That isn't dead kit. It's live personal data sitting in your building, and you're still the one answerable for it.

Deleting the files doesn't remove them. Formatting doesn't either. And on a modern SSD, overwriting the drive doesn't reliably work the way the old advice says it does, because the controller decides where your write actually lands.

We've written up what does work, how to check a disposal firm is what it claims to be, and the second rulebook nobody reads: who legally has to pay to recycle business IT, and why a skip isn't one of your options.

https://www.alphaitsolutions.uk/blog/disposing-of-old-business-computers/

Also on Telegram: t.me/AlphaITSolutionsUK

Deleting files doesn't remove them, and a certificate of destruction proves little on its own. How to wipe old business computers, and what the law wants.

Somebody hands in their notice. Everyone thinks about the handover and the leaving card. Nobody writes down the list of ...
25/08/2026

Somebody hands in their notice. Everyone thinks about the handover and the leaving card. Nobody writes down the list of things they can still log into on Monday.

One detail from Microsoft's own documentation that catches most people: blocking a Microsoft 365 account can take up to 24 hours to take effect. If you want someone out now, you reset the password first, then sign them out of all sessions, then block. In that order. An access token already issued is good for about an hour on its own.

The bigger exposure is everything that isn't Microsoft: the VPN, the CRM, the website admin, the domain registrar, the subscription somebody bought on a card. And shared logins, which can't be revoked from one person at all. Changing the password for everyone is the only real revocation there.

https://www.alphaitsolutions.uk/blog/offboarding-revoking-access-when-staff-leave/

Also on Telegram: t.me/AlphaITSolutionsUK

Blocking a Microsoft 365 account can take up to 24 hours to bite. What to switch off on a leaver's last day, in what order, and where the law comes in.

A spreadsheet sent to the wrong inbox counts as a data breach under UK GDPR. Same as a hacker breaking in. And once you ...
24/08/2026

A spreadsheet sent to the wrong inbox counts as a data breach under UK GDPR. Same as a hacker breaking in. And once you know about it, the clock is already running: 72 hours to tell the ICO, if it's serious enough to need telling.

New on the blog: what actually counts as a reportable breach, when the 72-hour countdown really starts, and what you still have to write down even if you decide not to report.

👉 https://www.alphaitsolutions.uk/blog/data-breach-notification-72-hours/

Also on Telegram: t.me/AlphaITSolutionsUK

UK GDPR gives you 72 hours to tell the ICO about a breach that risks harm to people. What counts, what to record, and what happens if you miss it.

Quick one if you use agency staff on Temporra, or through any agency at all.The Agency Workers Regulations have been law...
24/08/2026

Quick one if you use agency staff on Temporra, or through any agency at all.

The Agency Workers Regulations have been law since 2011. After 12 calendar weeks in the same role with the same hirer, an agency worker gets the same pay, hours, night work terms and annual leave as if you'd hired them directly. Simple rule. Most businesses still can't say exactly when that clock started for a given worker, though, or whether a break paused it or wiped it out.

Our new guide sets out how the 12 weeks actually count, what pauses the clock, what resets it, and what a hirer needs on file if an agency ever asks.

Also on Telegram: t.me/AlphaITSolutionsUK

👉 https://temporra.app/agency-worker-equal-treatment-12-week-rule.html

Agency workers get equal pay, hours and leave terms after 12 calendar weeks with the same hirer, in the same role. What counts, and what resets the clock.

Less than half of UK businesses have two-factor authentication switched on. Microsoft's own figure is that it blocks ove...
20/08/2026

Less than half of UK businesses have two-factor authentication switched on. Microsoft's own figure is that it blocks over 99.9% of account attacks. That gap is the biggest single fix most businesses haven't made yet, and it usually costs nothing extra.

New on the blog: what counts as a proper second factor, why an app beats a text message, the "MFA fatigue" trick that got Uber breached in 2022, and the Cyber Essentials rule from April 2026 that now makes this a straight pass or fail.

Also on Telegram: t.me/AlphaITSolutionsUK

Fewer than half of UK firms have two-factor authentication on, though Microsoft says MFA blocks over 99.9% of account attacks. What to enable first, and why.

A facilities firm running a pool of bank cleaners for sickness cover has never had to think hard about zero-hours contra...
20/08/2026

A facilities firm running a pool of bank cleaners for sickness cover has never had to think hard about zero-hours contracts. That's changing.

Three new rights are on the way: guaranteed hours worked out from what someone actually did, notice of a shift, and payment if you cancel one late. None of the numbers are locked in yet, the consultation on the low-hours threshold and how far back the reference period looks closes 25 August, five days from now. But the shape of it is clear enough to start planning for.

1.2 million people in the UK work zero-hours right now. If any of yours do, our new guide covers what's confirmed, what's still open, and what's worth logging today rather than waiting for the final rules.

Also on Telegram: t.me/AlphaITSolutionsUK

The Employment Rights Act adds guaranteed hours, shift notice and cancellation pay for zero-hours staff. What changes, when, and what records you need now.

Antivirus still does the one job it was built for: matching a file against known malware. The trouble is, CrowdStrike's ...
19/08/2026

Antivirus still does the one job it was built for: matching a file against known malware. The trouble is, CrowdStrike's own numbers put 79% of attacks last year at using stolen logins and legitimate tools instead of any malware file at all.

Our new guide covers what EDR actually watches for instead, what NCSC's own guidance really says about it (more measured than the marketing suggests), and what moving up from antivirus to EDR to MDR actually costs.

👉 Read it below

Also on Telegram: t.me/AlphaITSolutionsUK

Signature antivirus misses most modern attacks. What EDR actually catches, what NCSC guidance really says, and what it costs for a small UK business.

Quick one if your business still has an old-style phone line: it's being switched off for good on 31 January 2027. No mo...
18/08/2026

Quick one if your business still has an old-style phone line: it's being switched off for good on 31 January 2027. No more extensions, Openreach has confirmed.

It's not just the desk phone. Fire alarms, lifts, card machines and some CCTV often run on the same old copper line, quietly, in the background — and the wholesale price of staying on it has already gone up twice this year.

Our new guide covers what to check, and in what order.
👉 https://www.alphaitsolutions.uk/blog/pstn-switch-off-2027-small-business/
Also on Telegram: t.me/AlphaITSolutionsUK

The UK's copper phone network closes for good on 31 January 2027. What's affected, why alarms and card machines are at risk, and what to check first.

Since April, statutory sick pay starts on day one. No three unpaid days first, and the earnings floor that used to shut ...
18/08/2026

Since April, statutory sick pay starts on day one. No three unpaid days first, and the earnings floor that used to shut low-paid staff out entirely is gone too.

Our new guide covers what actually changed, the SSP record-keeping rule that quietly disappeared back in 2014 (and the one that didn't), and the five things worth logging for every sickness absence now that a vague start time can cost real money.

Also on Telegram: t.me/AlphaITSolutionsUK

👉 https://temporra.app/statutory-sick-pay-record-keeping-2026.html

SSP now starts on day one with no earnings floor. What changed on 6 April 2026, what HMRC can still ask you to produce, and what to actually log.

Address

London
Dagenham
RM9

Opening Hours

Monday 8am - 8pm
Tuesday 8am - 8pm
Wednesday 8am - 8pm
Thursday 8am - 8pm
Friday 8am - 8pm
Saturday 10am - 7pm
Sunday 10am - 5pm

Website

Alerts

Be the first to know and let us send you an email when Alpha it Solutions posts news and promotions. Your email address will not be used for any other purpose, and you can unsubscribe at any time.

Shortcuts

Share

Category