From the Field: Real Fixes From Our Helpdesk
Every week our helpdesk handles the same kinds of problems that slow down small businesses across Minneapolis–St. Paul: spoofed email, phishing links, locked laptops, and tools that quietly get in each other's way. Here are six recent ones, with client details removed, and what you can learn from each.
An executive at a Twin Cities marketing firm kept receiving suspicious emails that appeared to come from her own address. We found the company's SPF record was set up correctly, but the domain had no DKIM signing and no DMARC policy, so receiving mail servers had no instruction to reject messages that faked the domain. We generated DKIM keys in Microsoft 365, published the DNS records, turned on DKIM signing, and set out a DMARC rollout: start in quarantine mode, review the reports, then move to reject.
Without DMARC, anyone can send mail that looks like it came from your domain, to your own staff, your clients, or your vendors. That's how invoice fraud and wire-transfer scams start. Many cyber insurance questionnaires now ask about DMARC specifically.
SPF alone isn't enough. Every domain that sends email should have SPF, DKIM, and DMARC set up, with someone reading the DMARC reports. If you've never checked yours, it takes about five minutes to find out and is one of the cheapest security improvements you can make.
Two estimators at a construction company received a "please review the transcript shared with you" email that appeared to come from a software vendor they work with. The link wouldn't open for either of them and told them to contact their administrator, so they forwarded it to us instead of trying again. We inspected the link safely and confirmed it was phishing: it automatically downloaded a remote-access agent that would have given an attacker control of the computer.
Modern phishing rarely looks like a scam. It copies real vendors, real file-sharing notices, and real names you recognize. The error message they saw was a sign their protections were working, and their instinct to ask before trying again was exactly right.
The best security tool is a team that knows it can ask. When someone sends us a suspicious message, our first questions are: were you expecting this, did you enter a password, and can you forward the original so we can inspect it? If the message turns out to be fake, we tell them to check with the real sender directly, never by replying to the suspicious email.
A designer's laptop battery drained completely. When she powered it back on, she was stuck at a BitLocker recovery screen and couldn't do anything. Because her recovery key had been saved when the drive was encrypted, we retrieved it, walked her through entering it, and got her back to work.
Drive encryption protects your data if a laptop is lost or stolen, and most compliance frameworks require it. But encryption without a managed recovery key turns a routine power problem into lost files, a wiped laptop, and a lost day of work.
Turning on encryption is the easy part. Managing it is where the value is: recovery keys escrowed centrally, a record of which devices are protected, and a helpdesk that can unlock a laptop over the phone.
An accounting clerk suddenly couldn't open messages in the accounts payable and accounts receivable shared mailboxes. Her own mailbox worked fine, permissions hadn't changed, and reinstalling Outlook didn't help. We traced it to a reading-pane problem in the new Outlook for Windows: the same messages opened normally in a separate window, and everything worked in classic Outlook. We switched her back to classic Outlook so AP and AR work could continue.
Microsoft is pushing everyone toward the new Outlook, and it doesn't yet handle every shared-mailbox setup the same way classic Outlook does. Users often spend hours reinstalling and resetting before they realize the problem isn't on their end.
Knowing which Microsoft 365 issues are known bugs, and which workaround to use, comes from supporting many offices at once. We keep track of these so your finance team doesn't have to troubleshoot Outlook in the middle of month-end.
A business owner's home computer had stopped backing up to its cloud backup service. The backup vendor's support team suspected the endpoint security agent was blocking the reinstall, and they were right: the installer downloaded but was stopped as soon as it ran. We added the backup software as a trusted application in the security console, and the reinstall went through.
Security tools and backup tools both need deep access to your files, so they often conflict. When they do, the backup usually loses, and often nobody notices until the day you need to restore something.
Your security stack and your backup stack should be managed by the same team, with exclusions set on purpose and backups checked regularly. A backup you haven't verified recently is only a hope.
A small office was moving off an old Windows file server and on-premises Active Directory to Microsoft Entra ID. Instead of buying another server, we specified a Synology DS925+ with three IronWolf Pro drives in a parity-protected array and a fourth drive kept on-site as a cold spare. We set up shared folders, group permissions, security settings, and updates to work with the new cloud identity setup.
Many small businesses are paying to maintain a full server just to share files. A properly configured NAS costs less, uses less power, and is simpler to look after, especially once user accounts have moved to Microsoft 365.
As an authorized Synology reseller, we size these systems for the workload in front of us, not the biggest model available. Keeping a cold spare on the shelf means a failed drive is a quick swap, not an emergency order.
None of these were dramatic outages. They were the everyday problems that cost small businesses hours of lost work and, sometimes, a lot more: an unprotected email domain, a convincing phishing link, a locked laptop, a backup that silently stopped.
The pattern is the same every time. Problems are cheaper to prevent than to fix, and much cheaper to fix when someone already knows your systems.
Get a free, no-obligation assessment — no commitment, no sales pitch.
Get Your Free IT Estimate