Microsoft Active Directory Reinstallation & Azure AD Sync NEW

This Request for Quotation (RFQ 2596b) from the Mine Health and Safety Council, a national public entity in South Africa, seeks a service provider to reinstall Microsoft Active Directory Domain Services (AD DS) and configure Microsoft Entra Connect to synchronise the on-premises directory with the existing Microsoft 365 / Azure AD tenant. The scope covers assessing the current Active Directory environment and recommending either a clean installation or an authoritative restore, installing and configuring AD DS on Windows Server 2025 (servers to be provided by the MHSC), and creating or restoring user, group, and computer objects without data loss. The service provider will also configure DNS, Group Policy Objects (GPOs), and Organisational Units (OUs), and validate the health of the new environment. Additional deliverables include troubleshooting, patching, and remediating on-premises servers as needed, and configuring Entra Connect with password hash synchronisation or pass-through authentication (to be agreed with the MHSC), Seamless Single Sign-On for hybrid-joined devices, and a rollback plan for critical errors. Synchronisation must use the MHSC's existing Microsoft 365 E5 licences, which include Entra ID P2.

Project deliverables include as-built documentation covering AD topology, GPO settings, OU structure, and Entra Connect configuration, a minimum two-hour technical handover session for the MHSC ICT team, and project management outputs such as a Project Charter, Project Plan, Risk Register, Communication Plan, weekly status reports, and a final Closeout Report with lessons learned. The contract is a once-off engagement. Bidders must hold a valid Microsoft Cloud Partner Program Solutions Partner designation for Infrastructure (Azure) and/or Security, and must provide proof through the Microsoft Partner Center or an official Microsoft partner certificate. This is a mandatory requirement, and bidders that do not comply will not be evaluated further.

Evaluation proceeds in phases: (1) completeness of returnable documents, including the SBD 1 invitation to bid, SBD 3 pricing schedule, SBD 6.1 preference claim, CSD registration, and a valid tax compliance PIN; (2) mandatory Solutions Partner requirement; (3) functionality, scored out of 100 points across signed reference letters for comparable AD or Azure AD Connect projects (20 points), the experience of the team member (25 points), relevant Microsoft certifications such as Solutions Architect Expert, Azure Administrator Associate, Identity and Access Administrator Associate, Server Hybrid Administrator Associate, and Security, Compliance, and Identity Fundamentals (20 points), and a project plan with timelines and activities, scored higher for completion in under three weeks (35 points); and (4) price and specific goals, weighted 80/20 for price and B-BBEE preference. Pricing must be in South African Rand, include VAT, and be valid for 30 days after closure. Payment is due within 30 days of invoice after deliverables are completed. Bidders should note that the pricing schedule includes a Data Loss Prevention (DLP) implementation line that does not appear in the scope of work, and that the schedule lists on-premises server remediation twice. Clarifications must be submitted in writing to ebids@mhsc.org.za, and bids must be emailed to the same address by 11:00 on 16 November 2026, as late submissions are not accepted.