Zero Trust

Zero Trust with Entra ID & Intune

We implement device-based Zero Trust access with Microsoft Entra ID and Intune. Together we define compliant device states and connect them to Conditional Access, including planned exceptions and emergency access.

Enquire about this service

Starting point

Where we start.

Strong identities are not enough when access remains possible from unknown or unsafe endpoints. At the same time, Zero Trust must not block productive work.

Outcomes

What you receive.

  • Defined trusted device states
  • Conditional Access model for compliant devices
  • Handled guest, administration and recovery scenarios
  • Controlled rollout with verifiable success criteria

Service modules

What we do together.

  1. 01Device and access scenarios
  2. 02Intune compliance policies
  3. 03Conditional Access for compliant devices
  4. 04Exception and break-glass model
  5. 05Pilot and effectiveness review

From a concrete problem to a lasting solution.

  1. 01

    Understand

    We clarify the problem to solve and what makes your day-to-day work difficult.

  2. 02

    Design the solution

    You receive a suitable solution with clear standards and a considered operating model.

  3. 03

    Implement

    We implement the solution, verify the outcome and document the environment.

  4. 04

    Shape operations

    Together, we define who handles maintenance, changes and continuous improvement. You receive a concrete operating plan; we agree on ongoing support to match your needs.

Operations & continuous improvement.

We regularly review effectiveness and adapt policies to new platforms, applications and business requirements.

For whom

Organisations using Entra ID and Intune that want device compliance to become a binding access signal.

Prerequisites

  • Microsoft Entra ID P1 and Intune
  • Basic device inventory and defined target groups

Working with us

What must be in place before access is restricted?

You need suitable Entra ID and Intune licensing, a device inventory and defined target groups. Before enforcing restrictions, we check whether affected devices can meet the agreed compliance requirements.

How do you handle guests and special cases?

Guest access, administrative access and exceptional device scenarios are assessed separately. Exceptions are explicitly justified and documented. We also agree on a rollback path before policies are enforced.

Direct contact

Interested?

Just give us a call. We will discuss your project personally, directly and without obligation.

Call us directly

0173 9653255

Reach us personally for an initial assessment of your project.

Prefer to write?

Send us an email

Information about how we process your details is available in our privacy notice.