What Managed IT Services Should Include (and What Costs Extra)

A checklist of what a managed IT plan should include, what usually costs extra, and how to read any quote so there are no surprises later.

Checklist · By NexJen IT Solutions · Reviewed October 2026 · 5 min read
Key takeaways
A complete managed IT plan covers help desk support, Microsoft 365 management, endpoint protection with monitoring, backup, patching, a security baseline, staff onboarding and offboarding, documentation and vendor coordination.
Projects, after-hours work, on-site visits, hardware, software licensing and extra devices are the items most often billed separately.
Before signing, mark every line of a quote as included, extra or unclear, and get the unclear items answered in writing.

A managed IT plan should cover the day-to-day work of keeping your people productive and your systems secure: a help desk, Microsoft 365 management, endpoint protection, backup, monitoring and patching, a security baseline, staff onboarding and offboarding, documentation and coordination with your other technology vendors. Projects, after-hours work, on-site visits, hardware, licensing and extra devices are usually billed separately. The checklist below lets you sort any quote into included, extra and unclear.

Why the details matter more than the monthly number

Two quotes with the same per-user price can deliver very different service. One may include backup and security monitoring; the other may list them as add-ons that appear on the first invoice. The cheapest-looking quote is not always the cheapest year.

Scope also decides who answers the phone when something breaks. If a task is not in the plan, it either waits for a separate quote or does not get done. Knowing the boundary up front avoids awkward conversations later.

The core checklist: what a plan should include

Use these nine areas as your baseline. A plan does not need to describe them in the same words, but each one should be clearly covered or clearly excluded.

Help desk support
Who your staff contact for everyday problems, how (ticket, email, phone), during which hours, and whether support is unlimited or capped by hours or tickets.
Microsoft 365 management
Accounts, licenses, mailboxes, shared mailboxes, Teams and SharePoint settings, and sharing rules. Some plans manage only computers, which leaves the system your firm actually runs on unmanaged.
Endpoint protection with detection and response
Security software on every computer that watches for suspicious behavior (endpoint detection and response, or EDR). With managed detection and response (MDR), a security team reviews and acts on those alerts rather than leaving them for you.
Backup
A separate copy of your important data, including Microsoft 365 email, OneDrive, SharePoint and Teams. Ask what is backed up, by which service, and how a restore is requested.
Monitoring and patching
Automated checks on device health and regular installation of operating system and application updates. Confirm whether monitoring is automated, staffed, or both, and when people actually respond.
Security baseline
A standard set of protections such as multi-factor sign-in (MFA), blocking older sign-in methods, and admin account controls, set to fit your Microsoft 365 plan.
Onboarding and offboarding
Setting up new staff with the right accounts and access, and removing access promptly when someone leaves.
Documentation
A written record of your systems, accounts, settings and vendors that you can access, not just the provider. This matters most if you ever change providers.
Vendor coordination
Help dealing with your internet provider, phone system, printer company and line-of-business software vendors when problems cross between them.

One point many owners miss: Microsoft secures its cloud platform, but under its shared responsibility model your organization stays responsible for your data, user accounts, access settings and the devices that connect. A managed IT plan is one way to cover that customer side of the line.

What commonly costs extra

These items are reasonable to bill separately, as long as the plan says so and tells you how they are priced.

• Projects: office moves, migrations, new servers or networks, and large setups. Ask whether these are hourly or a fixed fee agreed in writing.
• After-hours and emergency work: help outside business hours is often billed at a higher rate, sometimes with a minimum charge.
• On-site visits: many providers work remotely and charge for travel, or refer on-site work to a local technician.
• Hardware: computers, firewalls, printers and accessories are normally purchased separately.
• Software licensing: Microsoft 365 and other subscriptions may be billed by the provider or paid by you directly. Either can work; just know which.
• Extra devices: per-user plans often cover one computer per person and charge for additional ones.
• Setup or onboarding fees: a one-time charge to get you started is common.

How to use this checklist on any quote

1. Write the nine core areas and the seven common extras down the left side of a page.
2. For each quote, mark every line as included, extra (with the price), or unclear.
3. Send the unclear items back to the provider and ask for answers in writing.
4. Calculate a realistic first-year cost: monthly fee times twelve, plus setup, plus any extras you expect to use, such as a second laptop for a few staff.
5. Compare what is left unclear. A provider who can answer every line plainly is usually easier to work with.

A worked example

Take a hypothetical 14-person architecture firm comparing two quotes. Quote A is lower per user but lists backup and MDR as add-ons and says nothing about Microsoft 365 management. Quote B is higher per user and includes all three.

Once the firm adds backup and MDR to Quote A and asks who will manage its Microsoft 365 accounts and sharing settings, the gap narrows sharply. The firm also notices that five staff use both a desktop and a laptop, so it asks both providers how extra devices are priced. The decision becomes about service fit, not a headline number.

Common mistakes

• Assuming Microsoft 365 is backed up by a managed IT provider without checking that backup is in the plan.
• Reading 24/7 monitoring as 24/7 help desk. Automated monitoring runs around the clock; people may not.
• Ignoring documentation until you need to change providers.
• Forgetting to count extra devices, shared computers and conference room machines.
• Not asking how on-site needs are handled if the provider is remote.

How NexJen can help

NexJen Essentials is one example of a plan written out line by line. It includes unlimited remote help desk during business hours by ticket or email, Microsoft 365 management, endpoint protection with MDR on every covered Windows and Mac computer, Microsoft 365 backup through a separate third-party service, 24/7 automated monitoring and patching, a Microsoft 365 security baseline scaled to your plan, onboarding and offboarding of staff, and an optional annual check-in call.

What is extra is also stated: computers beyond one per user are $5 per device per month, after-hours and emergency work is $250 per hour with a one-hour minimum, and project work is $200 per hour or a fixed fee agreed in writing. There is a one-time $499 setup fee. On-site technical work goes through a referral to an independent local technician whom you contract directly. By default you keep your own Microsoft 365 subscription and pay Microsoft directly, though we can quote licensing case by case.

Common questions

Should a managed IT plan include cybersecurity?

It should include the basics: endpoint protection with detection and response, patching, MFA and a security baseline. Specialized work such as formal compliance audits is often separate.

Is Microsoft 365 licensing usually included?

It varies. Some providers resell licenses inside the plan, others leave the subscription with you. Ask which applies so you compare quotes on the same basis.

What does 24/7 monitoring actually mean?

Usually that automated tools watch your devices around the clock. Ask separately whether a person responds outside business hours and what that costs.

See what a published plan looks like

NexJen Essentials lists what is included and what is extra on one page, so you can hold it up against any other quote.

Want a second opinion on your setup?

Start with a free Security Snapshot. We'll tell you honestly what we find and whether we can help.