Practice shows in the approach.

Mid-sized manufacturing

Conditional Access without blocking the business

Organically grown MFA rules and numerous exceptions had to be consolidated without disrupting production and field operations.

Our approach

• Mapped application and user access paths
• Assessed policies in report-only mode first
• Resolved special cases, recovery and emergency access before rollout

Outcome

A transparent policy model with clear ownership and a staged adoption plan.

Related services

• Microsoft Entra ID consulting & security
• Zero Trust with Entra ID & Intune

Business consolidation

Microsoft 365 tenant migration: 80 devices in one weekend

Two companies with separate Microsoft 365 tenants had to be consolidated into a shared target tenant. Only one weekend was available to migrate 80 Windows devices, and every workplace had to be ready again on Monday.

Our approach

• Prepared the complete Intune configuration, applications and Windows Autopilot setup in the target tenant
• Collected hardware hashes automatically with a script, transferred them through Azure Blob Storage and registered the devices in the target tenant before the weekend
• Protected user data with OneDrive and synchronised browser favourites through Microsoft Edge before the migration
• Reinstalled Windows and Office in under five minutes per device using prepared imaging USB drives
• Signed in the target users, configured Windows Hello for Business and assigned pre-registered FIDO2 security keys

Outcome

All 80 devices were moved to the new tenant within a single weekend. On Monday, employees received their fully configured devices together with their FIDO2 security keys – with user data, browser favourites and modern passwordless sign-in ready to use.

Related services

• Microsoft Intune consulting & deployment
• Microsoft 365 setup and ongoing support