The renewal notice from your IT provider arrives the same week as another ticket that’s been open for days. You already know you want to leave. Then the awkward questions start: who has the admin passwords, who controls your domain name, and where exactly are the backups kept? Plenty of businesses stay with a provider they’re unhappy with simply because they’re not sure what they’d lose by leaving.
This guide explains how to switch managed IT providers in a planned order, so your team keeps working and your business keeps hold of its systems and data. It’s written for business owners, finance directors and office managers who need to manage the move without being IT experts, and it’s honest about the parts that take time.
TL;DR
Most problems are avoided by doing things in the right order: secure your own admin access and a full list of what your provider manages before you give notice, then run a planned handover where both providers overlap for a short period. Expect some small changes for staff, such as a new support contact, but not lost systems. Rush the move and you risk being locked out of email, your website or your backups at the moment you need them.
Key takeaways
- Read your contract’s notice period and exit terms before you tell your current provider anything.
- Make sure at least two admin accounts for Microsoft 365 belong to your business, not to your provider’s staff.
- Write a list of every system, licence, domain and supplier your provider looks after for you.
- Agree a handover date with your new provider and keep the old one responsible until it has passed.
- Get written confirmation that the old provider has returned or deleted your data and removed its access.
What you’ll need before you start
Set aside time for one person in your business to own the switch, usually whoever handles contracts or operations. You’ll need a copy of your current contract, a list of the people who can approve changes, and access to your Microsoft 365 admin centre or someone who can sign in to it. If you’re still deciding whether to leave, the signs that your IT support provider is failing to deliver can help you judge.
Outsourcing is common. The UK government’s Cyber Security Breaches Survey 2025/2026 found that 48% of UK businesses had an external cyber security provider, yet only 15% reviewed the risks posed by their immediate suppliers. Leaving a provider is a good moment to put that right, because you’ll find out exactly what they control. Be realistic about disruption too: a planned switch shouldn’t stop work, but staff may need to reinstall a support tool, use a new helpdesk contact or re-register a sign-in app.
Stage 1: before you give notice
1. Check your contract’s notice and exit terms
Find the notice period, any minimum term and what the contract says about ending the service. The National Cyber Security Centre (NCSC) advises that an IT provider contract should cover what happens if you want to end or change it. Also check that your data is covered: the Information Commissioner’s Office (ICO) says contracts with a data processor(a supplier that handles personal data for you) must make sure it deletes or returns all personal data at the end of the contract. This isn’t legal advice, so ask a solicitor if the terms are unclear. Common mistake: giving notice first, then discovering the notice period runs past your new provider’s start date.
2. Make sure your business owns its admin accounts
An admin account is a sign-in with full control over a system, such as Microsoft 365. If only your provider’s engineers know these passwords, you’re relying on their goodwill to leave. Microsoft recommends creating two or more emergency access accounts for Microsoft 365 that aren’t tied to any individual, with credentials stored somewhere secure that more than one trusted person can reach. Common mistake: assuming a director’s account has admin rights without checking.
3. List everything your provider manages
Write down every system and supplier your provider looks after: Microsoft 365 and its licences, laptops and phones, firewalls and Wi-Fi, backups, phone lines, your website hosting and your domain name. For domains, check who is named as the registrant (the legal holder). Nominet, which runs .uk domains, requires registrants to provide accurate details, and the registrant should be your business. For phones, Ofcom’s number portability rules let customers keep their numbers when changing provider. Common mistake: forgetting supplier accounts your provider set up in its own name.
Stage 2: brief your new provider
4. Share your list and agree a handover plan
Give your new provider the list from step 3 and ask for a written plan with dates, owners and what happens if something goes wrong. A good managed IT support provider will ask questions about your systems, your busy periods and any staff who rely on specialist software. Common mistake: accepting a start date without a plan behind it.
5. Plan a short overlap between providers
Your old provider should stay responsible until a fixed handover date, with the new provider taking over in stages. Agree in writing who handles support tickets during that period, so nothing falls between the two, and avoid scheduling the switch during your busiest weeks, such as a year-end or a large client deadline. Ask the new provider to visit or contact key staff before the date, so the first support call isn’t the first conversation. Common mistake: letting the old contract end before the new provider has access to everything.
Stage 3: the handover
6. Check your backups before anything moves
Ask for proof that your latest backups worked and make sure you hold a recent copy your business controls. The 3-2-1 backup rule is a useful test of whether your backups would survive a problem during the move. Common mistake: assuming backup subscriptions transfer automatically, when some are tied to the old provider’s own accounts.
7. Move admin access and licences in order
Your new provider should set up its own access first. Microsoft partners usually manage Microsoft 365 through granular delegated admin privileges (GDAP), permissions you grant them for specific tasks. Microsoft Learn explains that customers can remove a partner’s GDAP from the Partner relationships page in the Microsoft 365 admin centre, after which that partner’s staff can no longer administer your services. Agree how your Microsoft 365 licences will move, so nobody loses email or files mid-switch. Common mistake: removing the old provider’s access before the new provider has confirmed its own works.
8. Remove old tools and change shared passwords
Ask the outgoing provider to uninstall its remote support software from every computer, then change any shared passwords it knew, such as Wi-Fi keys and firewall logins. The NCSC advises giving IT providers only the permissions they need and removing access when the job is finished. Common mistake: leaving an old remote access tool on a laptop for months after the switch.
Stage 4: after the switch
9. Brief staff and confirm the old provider has finished
Tell staff the new support contact and what, if anything, they need to do. Check printers, shared drives and phones over the first few weeks, and keep a short list of anything that behaves differently so the new provider can fix it in one go. Finally, get written confirmation from the old provider that it has returned or deleted your data and closed every account it held. Common mistake: never asking for that confirmation, so old copies of your data sit with a supplier you no longer use.
When to get professional help
Bring in help early if you can’t get admin access to Microsoft 365, if you run servers or specialist software in your office, or if you’re regulated and need a record of how the handover was managed. For London offices with on-premises equipment, on-site IT support during the handover week means someone can check cabling, firewalls and printers in person rather than guessing remotely.
Your switching plan at a glance
Use this table as a running order for your switch and tick off each step as it’s done.
| Step | What to do | Common mistake |
| 1. Contract terms | Check notice period, exit terms and data return | Giving notice before reading them |
| 2. Admin accounts | Create two business-owned emergency admin accounts | Only the provider knows the passwords |
| 3. System list | List systems, licences, domains and suppliers | Missing accounts in the provider’s name |
| 4. Handover plan | Get a written plan with dates and owners | A start date with no plan behind it |
| 5. Overlap | Keep the old provider responsible to a fixed date | Old contract ends too early |
| 6. Backups | Prove backups work and hold your own copy | Assuming backups move automatically |
| 7. Access and licences | New access first, then remove the old provider’s | Removing old access too soon |
| 8. Tools and passwords | Uninstall old tools and change shared passwords | Old remote tools left on laptops |
| 9. Staff and sign-off | Brief staff and get data deletion confirmed | No written confirmation from the old provider |
How long does it take to switch managed IT providers?
The timescale depends mostly on your notice period, how many people and devices you have, and how much your current provider controls in its own name. The technical handover is often quicker than the contract notice period.
A small office with Microsoft 365 and a handful of laptops is simpler to move than a business with on-premises servers, specialist software and several sites. Start the preparation in steps 1 to 3 as soon as you’re thinking about leaving, because it costs nothing and makes every later step faster.
Can an IT provider refuse to hand over passwords or data when you leave?
What a provider must hand over depends on your contract and on data protection law, so check both before relying on goodwill. The ICO says contracts with suppliers that handle personal data for you must require them to delete or return it at the end of the contract.
In practice, most handover problems come from admin accounts and supplier logins held in the provider’s name rather than yours. Securing your own emergency admin accounts in step 2 removes most of that risk. If a provider won’t cooperate, take legal advice rather than trying to regain access by guesswork.
Switching IT provider with confidence
A good switch is planned, not rushed. Your business holds its own admin accounts, you know everything your provider manages, the old and new providers overlap for a short, agreed period, and you finish with written confirmation that your data and access are back in your hands.
Cloudscape has served London businesses for more than 25 years, manages over 130 Microsoft 365 environments and is a Microsoft Partner with Cyber Essentials accreditation. Clients such as Tyson Foods have worked with Cloudscape for over a decade. Talk to Cloudscape about switching IT provider to plan a handover that keeps your business running.