Services

These are the four areas in which I help organizations.

Modern workplace with Intune

I set up Windows, Apple and Android devices with Microsoft Intune, from the first deployment to day-to-day management.

Call me in when new devices are still prepared by hand, when you want to leave Configuration Manager behind, or when Intune is in place but nobody quite knows any more how it was set up. I set it up so that a new device configures itself as soon as the user signs in, and I document how everything works.

• Autopilot, security baselines and compliance policies
• Packaging apps with PSADT and deploying them as Win32 apps
• Automation with PowerShell
• Self-service tools that let users and the service desk fix device problems
• The move to Windows 11
• Phones and tablets with iOS, iPadOS and Android, including personal devices with app protection

Identity, access and security

I make sure that only the right people, on managed and secure devices, get to your data.

This comes up after an audit or a penetration test with findings, when MFA and Conditional Access are only half in place, or when you want to know which devices are behind on updates. I map it out and fix it step by step, without locking users out for no reason.

• Entra ID, Conditional Access and MFA
• Microsoft Defender for Endpoint, connected to Intune and Defender for Cloud Apps
• Fixing vulnerabilities and findings from a penetration test
• Phasing out legacy protocols, such as TLS 1.0 and 1.1 and NTLMv1
• Making patch status and vulnerabilities per device visible in Power BI, with data from Intune and Defender

Azure and Azure Virtual Desktop

I build and manage infrastructure in Azure and connect it to your existing environment.

For example when you want to move servers or workplaces to Azure, or run heavy applications such as CAD remotely. I design the network and the virtual desktops and connect them securely to your sites.

• Virtual networks in Azure and hybrid connections with VPN Gateway
• Azure Virtual Desktop with multi-session hosts, including GPU for CAD, and profiles with FSLogix
• Other VDI environments, such as Omnissa Horizon

Migrations and networking

I move environments to Microsoft 365 and make sure the network underneath is right.

For example when you move to Microsoft 365, merge two organizations or move management from Configuration Manager to Intune. I plan the move so that users notice as little of it as possible.

• From on-premises to Microsoft 365, and between tenants with cross-tenant synchronization
• Management from on-premises to the cloud: from Configuration Manager to Intune and Entra ID
• Firewalls, switches and Wi-Fi in environments with equipment from different vendors

How I work

1. Introduction. We discuss your environment and what you want to achieve.
2. Design. I document what needs to happen and why.
3. Implementation. I build and test it in your environment.
4. Handover. You get documentation, so your own administrators can take it from there.

I work remotely and on site, from Uithoorn in the Netherlands. Curious what I can do for your environment? Get in touch.