The short answer: Most managed IT agreements include ongoing support and management of your day-to-day environment: a helpdesk, monitoring, patching and maintenance, and basic security management. Items that are frequently billed separately include projects (migrations, office moves, new builds), hardware and software licensing, on-site or after-hours work, and sometimes backup or advanced security. Every provider draws the line in a different place, so the only reliable answer is the written scope in the agreement you are being asked to sign.
Most frustration with managed IT comes from mismatched assumptions, not bad intentions. You thought it was covered, they thought it was a project. This guide helps you find out before you sign.
Why "included" means different things at different providers
Two providers can quote the same per-user price and deliver very different services. One may bundle backup, security tools, and on-site visits. Another may list them as add-ons. That is one reason price comparisons alone are misleading. Sources we reviewed put managed IT at roughly $80 to $375 per user per month, varying by provider and scope, and a good share of that spread comes from what is inside the package. See how much managed IT services cost.
What is typically included
These are the categories most managed IT agreements address. Whether each one is in the base price or an add-on varies.
Helpdesk and end-user support
The core of most agreements: a place to call or write when something does not work. Look at the hours (business hours or 24/7), how you contact them, and whether support is remote only, or includes on-site visits. At NORPS, the centralized helpdesk is a single number or email for technology needs, backed by team members familiar with your staff, systems, and business processes, and is available to clients 24/7/365.
Monitoring and maintenance
Watching servers, workstations, and network devices for problems, plus regular maintenance. This includes performance monitoring, software installation and upgrades, and patching for operating systems and common applications.
Desktop, laptop, and server support
Support for Windows desktops, laptops, and servers, including troubleshooting and routine administration.
Network and infrastructure management
Managing your wired and wireless network, including firewalls and VPN or remote access. For more complex environments, this can include virtual environments and shared storage.
Security management
Typically includes some combination of:
- Endpoint or enterprise antivirus management
- Firewall management and monitoring
- Web and email content filtering
- VPN and remote access
- Mobile device management
The depth varies a lot. Ask exactly which tools and which tasks are part of the base price.
Backup and recovery
Some agreements include monitored backup with off-site or cloud copies. Others treat it as a separate service. Ask about what is backed up, how often, who monitors it, and whether restores are tested. Business continuity planning and email continuity are sometimes separate line items too.
Account and vendor management
Managing user accounts, email, licenses, and sometimes working with your software or internet vendors on your behalf. Ask whether the provider will deal with your other vendors, or whether you are the go-between.
Reporting and review
Regular reports and periodic check-ins about tickets, status, and upcoming needs. This is often the difference between a provider that reacts and one that plans.
What is commonly billed separately
Expect to see some of these as extras, though a given provider may include them.
- Projects. Server replacements, cloud migrations, office moves, new network builds, and major upgrades are usually scoped and quoted on their own.
- Hardware. Computers, servers, firewalls, and access points are typically purchased in addition to the service, often through the provider's procurement help.
- Software licensing. Microsoft 365, backup software, security subscriptions, and line-of-business software often carry separate per-user or per-device fees, which may be passed through by your provider.
- After-hours and on-site work. Some agreements include these, some bill at a rate, and some limit the number of visits.
- Advanced security services. Services such as security audits, penetration testing, or compliance work are often separate engagements.
- Third-party and line-of-business application support. Your provider may support the platform but not the specialized software on it.
- Training. User training and security awareness programs may be add-ons.
- Onboarding. Some providers charge a one-time onboarding fee, and some fold it into the rate.
- Web hosting and development. These are typically separate from ongoing IT management.
Whichever provider you choose, ask to see in writing what sits in the base monthly fee and what is quoted separately as project or hardware work.
How to read a scope of services document
When you review a proposal or managed services agreement, look for these:
- A service list, not just marketing language. "Comprehensive support" means nothing without specifics.
- Defined exclusions. A good agreement says what is not covered.
- Response and resolution commitments. Are they in writing?
- Who is counted as a user or device. Shared mailboxes, part-timers, and personal phones can change the math.
- Rates for out-of-scope work. Hourly rates or project pricing approach.
- Hardware and license ownership. Who owns what at the end of the term?
- Renewal and exit terms. See how to switch managed IT providers.
A quick checklist to bring to every provider
Ask each provider to mark these as Included, Extra, or Not offered:
- Helpdesk hours and method
- On-site visits
- After-hours support
- Patching and updates
- Endpoint antivirus and security tools
- Firewall and VPN management
- Email and content filtering
- Mobile device management
- Backup and restore testing
- Business continuity planning
- Projects and migrations
- Hardware procurement
- License management
- Vendor liaison
- Reporting and planning meetings
- Onboarding
Pair this with our guide to questions to ask a managed IT provider before signing.
Why getting this right matters
Scope clarity protects both sides. You avoid surprise bills, and the provider avoids working for free on things it never priced. If you are weighing managed IT against a hire, scope also helps you compare fairly. See should I hire in-house IT or outsource?
How NORPS approaches scope
NORPS is an Oklahoma City IT services company that supports organizations from 1 to 500 employees, with more than 70 years of combined experience in the computer field. Our services span general support, small business enterprise services, network security, backup and recovery, and IT consulting, including network assessments and audits, security policy planning, asset lifecycle management, and vendor and procurement assistance. We listen first, then recommend, plan, and implement.
Frequently Asked Questions
What is usually included in managed IT services?
Usually a helpdesk, monitoring, patching and maintenance, and management of desktops, servers, and network devices, plus some level of security management. Backup, on-site support, and advanced security are included by some providers and billed separately by others.
What is typically not included in a managed IT agreement?
Projects such as migrations and office moves, hardware purchases, software licensing, and certain after-hours or on-site work are commonly billed separately. Check the written scope, because providers differ.
Is backup included in managed IT?
It depends on the provider. Some include monitored backup with off-site or cloud copies, while others sell it as an add-on. Ask what is backed up, where copies are kept, and whether restores are tested.
Are hardware and software licenses included?
Usually not in the base service fee. Hardware is typically purchased separately, and licenses are often billed per user or per device, sometimes through the provider. Ask who owns them.
Get a clear scope in writing
Want to see exactly what is covered before you commit? Talk to NORPS and we will walk you through what is included, what is not, and why.