“Managed IT support” is one of those phrases that means something slightly different at every company selling it. Here is what it normally includes, what usually costs extra, and the questions worth asking before signing anything.
The core of every legitimate agreement
- Help desk — your staff can call or email someone when something breaks. Check the response-time commitment and whether it is business hours or 24/7.
- Monitoring — servers, workstations and network devices watched continuously so failures are caught before they become outages.
- Patch management — operating systems and key software updated on a schedule, which is one of the highest-value and most-neglected security controls.
- Endpoint protection — managed antivirus or, increasingly, EDR on every machine.
- Backup management — backups configured, monitored, and — critically — tested. Ask specifically about restore testing.
- Vendor coordination — someone dealing with your ISP, phone provider and software vendors instead of you.
What is usually not included
This is where surprises live. Commonly billed separately: hardware and software purchases, major projects like migrations or office moves, cabling and physical installation work, after-hours emergency response beyond the agreement, and on-site visits beyond a set number. None of these are unreasonable exclusions — but they should be stated plainly rather than discovered on an invoice.
How pricing normally works
Most providers price per user or per device, monthly. Per-user tends to suit businesses where people have multiple devices; per-device suits shared-workstation environments like clinics or warehouses. Beware agreements that look cheap because they exclude the things you will actually need — a low per-user rate with everything billed hourly is not managed IT, it is a break-fix contract with a subscription attached.
Five questions that reveal the difference
- “When did you last test a restore for a client, and what happened?” Backups that have never been restored are hypothetical. A real provider has a specific answer.
- “What is your response time, and is it contractual?” Aspiration versus commitment.
- “Who actually answers the phone?” An engineer, a triage queue, or an overseas first line reading a script.
- “What happens if we leave?” Ask about documentation handover and admin credentials. Providers who make leaving painful are telling you something.
- “What is explicitly excluded?” Get it in writing. The exclusions list is more informative than the inclusions list.
The thing most providers cannot offer
Most managed IT companies do not install infrastructure — they manage what someone else built, and when the cabling or the network is the problem, you are back to coordinating two vendors who blame each other. We build the infrastructure and then manage it, which means the person supporting your network is the one who designed it. That is the whole argument for our managed IT services, and it is why we pair it with structured cabling and full office buildouts.
When you do not need managed IT
Honestly: if you are three people using laptops and cloud software with no server, no compliance obligation and no shared infrastructure, a full agreement may be more than you need. Hourly support plus solid backups and MFA might genuinely serve you better. Any provider unwilling to say that is selling rather than advising.
Want to know what a right-sized agreement looks like for your business? See managed IT services or call (833) 306-3168.