7 Signs It's Time to Fire Your MSP (And How to Avoid Getting Locked In)

Most business owners who are unhappy with their current IT provider don't switch — not because they think their MSP is doing a great job, but because they're not sure what they'd lose access to if they left. That uncertainty is exactly what keeps businesses stuck with providers who stopped earning their contract years ago.

Why Businesses Stay With a Bad MSP Longer Than They Should

Switching IT providers feels riskier than it actually is. Business owners worry about downtime during the transition, about losing data, about not knowing their own passwords, or about a messy handoff that leaves gaps a bad actor could exploit. So they renew another year with a provider they don't trust, telling themselves it's not bad enough to deal with the hassle of switching.

The irony is that the businesses most afraid to switch are usually the ones an MSP has made the most dependent — which is itself one of the clearest signs it's time to go.

7 Signs It's Time to Fire Your MSP

1. You don't hold your own admin credentials. If your MSP is the only party with Global Admin on your Microsoft 365 tenant, the login to your domain registrar, or admin access to your firewall, switches, servers, or wireless controller, you don't control your own business — they do. A good MSP manages these on your behalf; they don't withhold them from you.

2. Nobody can tell you your actual security posture. Ask your current provider for your Microsoft Secure Score, your last successful backup restore test date, and your current patch compliance percentage. If you get vague reassurance instead of numbers, they aren't actually measuring what they're supposed to be managing.

3. Support is reactive only. If your MSP only hears from you when something breaks — no proactive monitoring alerts, no patch management cadence, no quarterly review of what's aging out or at risk — you're paying for a fire department, not an IT department.

4. Response times are vague or routinely missed. "We'll get to it soon" is not an SLA. If your contract doesn't specify response-time commitments by severity, or it does and they're consistently missed, you have no real recourse when something urgent comes up.

5. You get a different technician every time, and none of them know your setup. Constant staff turnover with no dedicated point of contact means every ticket starts from zero. Your IT provider should know your environment better than a new hire would on day one.

6. Pricing is a black box. If you can't get an itemized breakdown of what you pay for — licensing costs, labor, hardware markup — separated from a lump "IT services" invoice, you have no way to know if you're being overcharged or what you'd actually pay somewhere else.

7. You've asked for your own documentation and been told no. Network diagrams, an asset inventory, a list of every login tied to your business — if a provider is reluctant to hand these over, or acts like you asking is a sign of distrust, that reaction is the red flag, not your question.

The Real Reason Switching Feels Risky: Vendor Lock-In

Vendor lock-in isn't always intentional sabotage — sometimes it's just neglect, with nobody ever handing you a copy of anything because nobody asked. But the effect is the same either way: your business becomes hostage to a single provider's continued goodwill. The fix isn't to distrust every MSP. It's to make sure your business, not any single vendor, owns the accounts that actually matter — regardless of who you hire to manage them day to day.

The Ownership Checklist: What Every Business Owner Should Personally Control

These are the accounts and assets that should exist under your name, in your password vault, whether your MSP manages them for you or not. If you can't check off most of these today, that's worth fixing before you need to switch providers under pressure.

1. Your domain registrar login. The account at GoDaddy, Namecheap, or wherever your domain is registered should be owned by you, with your own email as the recovery contact — never registered under your MSP's account.
2. DNS management access. Even if your MSP manages DNS records day to day, you should have a login that lets you view and edit them yourself if needed.
3. A Global Admin account on your Microsoft 365 or Google Workspace tenant. Keep one "break-glass" admin account that only you control, separate from any admin accounts your MSP uses — with its credentials stored somewhere only you can access.
4. An independent, exportable copy of your backups. Backups sitting exclusively inside your MSP's proprietary backup tooling aren't really yours if you can't get them out without their cooperation. Know exactly where your backups live and confirm you can export them.
5. Network documentation. Diagrams, IP address scheme, firewall rules, and Wi-Fi configs — kept somewhere you can access without calling anyone first.
6. A full software and license inventory. A list of every subscription and license your business pays for, and whether it's owned under your company's account or your MSP's reseller account (licenses under a reseller account can sometimes be revoked or held hostage if the relationship ends badly).
7. Exportable copies of any custom automation. If you've had Power Automate flows, scripts, or integrations built for you, get exportable copies — not just a system that only works because one specific vendor built and maintains it.
8. Shared access to a password vault. Every admin credential for your business should live in a password manager your company owns, not scattered across a vendor's internal notes or, worse, in one employee's head.

How to Switch Without Downtime or Drama

You don't need to have all eight of these already in place to switch providers safely — you just need a new provider who starts by getting them for you instead of adding to the problem. A clean transition starts with an environment audit: inventorying every account, license, and system currently in place, documenting what's missing, and recovering or resetting access to anything you don't currently control. From there, migration happens in the background — mail flow, security policies, and monitoring get set up and verified before your old provider is ever cut off, so there's no gap in coverage.

The businesses that regret switching are the ones that did it reactively, mid-crisis, with no documentation and no plan. The businesses that don't regret it are the ones that treated ownership of their own IT accounts as non-negotiable from day one — regardless of who's managing them.

Related Articles