One of the first things we check when taking over IT support for a Cairns business is whether staff are using consumer laptops. If they are, we usually know we’re about to find security gaps, data ownership problems and management headaches — before we’ve even opened the first ticket.
Over the past few years we’ve onboarded businesses across Cairns, the Atherton Tablelands, Innisfail and Port Douglas — accountants, medical clinics, construction companies, Indigenous organisations, hospitality operators and professional service firms. Across almost all of them, the same problem shows up in some form: nearly 7 out of 10 new clients we onboard have at least one staff member working on an unmanaged consumer device, with no MFA and no visibility for the business over where its own files are stored.
It usually starts the same way. Someone goes to a retail store, buys the cheapest laptop available, and starts using it for work. At first glance it looks fine — it turns on, sends emails, runs Microsoft Office. The trouble starts once the business grows beyond one or two people: files get saved into personal Microsoft accounts, passwords get shared between staff, nobody knows where critical documents actually live, devices can’t be managed remotely, and when someone leaves, they take years of company emails, contacts and files with them — because everything was tied to their personal login.
What started as a $300 saving on a laptop becomes a much larger operational problem. That’s why we almost always recommend business-grade computers running Windows Pro.
Jeff Bruce, Head of Computer Hardware Procurement at Brilliant Technologies, sees this almost every week.
Jeff says one of the first warning signs is seeing business staff signed into Windows with a personal Microsoft account. “As soon as I see documents syncing to a personal OneDrive account, alarm bells start ringing. The business often doesn’t even realise they don’t own or control where their data is being stored.” When that employee leaves, recovering that data can be difficult, costly, and sometimes impossible.
“Most business owners think they’re buying a computer. What they’re actually buying is the platform that their security, files and business processes will depend on for the next three to five years.”
Most businesses compare computers on purchase price alone. In reality, the hardware is often the smallest cost in the equation. The real costs show up later, as:
None of these costs appear on the invoice when the laptop is purchased. They show up later, as downtime, lost productivity and risk.
When businesses ask us what computer they should buy, they’re often surprised the conversation starts with Windows, not hardware specs. The reason is simple: Windows Pro lets a device properly join the company’s Microsoft 365 environment. That means we can enforce multi-factor authentication, require secure passwords, control which applications get installed, manage devices remotely, lock or wipe a lost device, deploy new starters faster, and remove access the moment someone leaves.
A laptop running Windows Home can look identical on the shelf. From an IT management standpoint, it’s a completely different product.
Ask Jeff what the most common issue is when onboarding a new managed IT client, and his answer is immediate: “Weak passwords and missing MFA. Without question.”
That pattern holds across almost every industry we support — a law firm in Cairns, a health provider in Mareeba, a not-for-profit in Cape York, a construction business working across regional Queensland. Passwords that can be guessed. MFA that’s never been switched on. Devices nobody’s actively managing. The good news is these are usually straightforward to fix once devices are properly enrolled into a managed Microsoft 365 environment.
One lesson we repeat constantly: business files should never depend on one employee’s personal account. When devices are set up correctly from day one, everything belongs to the organisation instead — files live in SharePoint, staff have proper Business OneDrive accounts, and access doesn’t disappear the day someone resigns. Backups are simpler, security is stronger, and offboarding stops being stressful.
A mistake we see often is businesses buying the same device for every employee, regardless of how they actually work. A bookkeeper living in Xero all day has very different needs to an engineer running CAD software. A healthcare provider on cloud-based systems needs something different again to a construction supervisor working remotely with patchy coverage.
Jeff’s advice is blunt: “Buy computers based on how people actually work, not what’s on special this week.” For some staff that means a light, portable laptop. For others it’s a high-performance workstation. For teams working remotely across Far North Queensland, it often means more local storage and stronger offline capability, given how inconsistent internet access still is in parts of the region. The right device depends on the role, not the catalogue.
Smartphones now carry just as much sensitive company information as laptops do — email, customer records, authentication apps, contacts, documents. When phones are properly managed under the same Microsoft 365 controls as laptops, a lost or stolen device doesn’t mean lost company data.
We won’t refuse to support a business outright, but we will document the risk clearly and won’t sign off on a consumer device as suitable for handling company data, MFA-protected accounts or client information. In practice this usually means putting the risk in writing, offering a staged migration plan to business-grade hardware, and being upfront that any data loss tied to an unmanaged personal account sits outside what we can reasonably guarantee or recover.
Do I need Windows Pro for a small business? Yes, if the device will touch company email, files or client data. Windows Pro is what allows a laptop to join a managed Microsoft 365 environment — without it, you can’t enforce MFA, control installed software, or remotely lock or wipe the device.
What happens to company files if a staff member used a personal Microsoft account? Those files are often synced to that person’s personal OneDrive rather than the business’s. If they leave, the business can lose access entirely, and recovering the data can be slow, costly, or in some cases impossible.
Is a $300 laptop actually more expensive in the long run? Often, yes. The hardware saving is usually small compared to the cost to upgrade to Windows Pro, potential downtime, support time and risks that follow — lost files, delayed onboarding, unmanaged security, and replacement devices with no business warranty.
Can phones be managed the same way as laptops? Yes. Company email, SharePoint access and authentication apps on a phone can be secured under the same Microsoft 365 device management used for laptops, including remote lock and wipe if the device is lost or stolen.
The cheapest computer is rarely the cheapest business solution. The businesses across Cairns and Far North Queensland with the fewest technology headaches are usually the ones that standardise their devices, run Windows Pro, integrate properly with Microsoft 365, and treat computers as part of their overall business technology strategy — not a one-off purchase.
As Jeff puts it: “The right business computer isn’t simply about hardware specifications.
It’s about creating a secure, manageable, and productive technology environment that supports your business as it grows.”
© Brilliant Technologies 2026