What Should a Business IT Helpdesk Actually Handle?

A business helpdesk should be more than an inbox where employees report problems. It should be the clear first point of ownership when an employee cannot work normally because of technology.

The exact scope varies by agreement, but employees should not need to understand the vendor map before asking for help.

Login and access issues

Password problems, MFA issues, locked accounts, access requests, and supported application sign-in failures are common helpdesk work.

Access changes should still follow company approval and security procedures. A technician should not grant permissions simply because a request sounds urgent.

Email and Microsoft 365 support

The helpdesk may assist with Outlook, mailbox access, shared mailboxes, Teams, OneDrive, SharePoint access, calendar issues, and other supported Microsoft 365 problems.

Tenant-level administration and security may sit with a separate escalation team, but the employee should still be able to start with one support path.

Device troubleshooting

Managed laptops and desktops generate a large share of employee requests: performance, updates, peripheral issues, software errors, storage, displays, docking stations, webcams, and other everyday problems.

When physical repair or replacement is required, the helpdesk should coordinate the next step rather than leaving the employee to determine the process.

Application support

The helpdesk can troubleshoot supported business applications, installation issues, access, configuration, and common errors. For vendor-specific defects, the MSP may need to escalate to the software provider.

The value is maintaining ownership of the ticket while another vendor is involved.

Connectivity

Wi-Fi, office network, VPN, internet, and remote-work connectivity issues are normal support topics. Troubleshooting may involve the user's device, local network, internet provider, firewall, or cloud service.

Printers and peripherals

Printers, scanners, conference-room devices, headsets, docks, and other peripherals are often in scope when they are part of the supported environment.

Some specialized equipment may remain under another vendor, but the helpdesk can still coordinate escalation.

Employee onboarding

A mature helpdesk often participates in new-hire setup: account creation, licensing, device preparation, standard application installation, MFA enrollment, access requests, and Day 1 support.

This works best when HR or operations provides enough lead time and a defined role-based checklist.

Employee offboarding

Offboarding includes account disablement, session revocation, device return, license recovery, mailbox and file handling, application access removal, and documentation changes.

For Microsoft-specific steps, use our Microsoft 365 offboarding checklist.

Vendor escalation

A helpdesk should not solve every vendor's technical problem internally. It should know when to escalate to the internet provider, phone vendor, line-of-business application, hardware manufacturer, or other third party.

The important part is preserving ownership and communication so the employee is not bounced between vendors.

What usually moves beyond Tier 1

Complex network changes, server failures, cybersecurity incidents, Microsoft 365 architecture, large migrations, advanced application problems, and infrastructure projects may require higher-tier or specialized technicians.

A well-designed helpdesk makes that escalation invisible to the employee.

What a helpdesk should not do without controls

• Grant privileged access without approval
• Bypass security controls for convenience
• Make high-risk production changes without change control
• Handle legal or compliance decisions outside its role
• Close tickets simply because another vendor was contacted

Measure ownership, not just ticket count

Useful helpdesk metrics can include response time, resolution time, reopen rate, recurring issue patterns, escalation quality, employee satisfaction, and ticket backlog.

A high number of closed tickets does not necessarily mean employees are receiving good support.

Two Factor's IT Helpdesk Services are designed around one employee support path, while Remote IT Support extends troubleshooting across distributed teams and locations.