A new hire waits a week for their laptop to be set up manually — apps, access, VPN
Intune + Autopilot: the user logs in on first boot, everything installs automatically. New laptop ready in 30 minutes.
Workstation fleet
Workstation and laptop fleet management
Intune, Autopilot, WSUS, MDT and scripts. Centralized laptop rollout, policies, updates, encryption and inventory — from 20 to 2000 devices.
When clients come to us
Three common scenarios and how we solve them.
Nobody knows how many laptops we have, who has them or what is installed
Automated inventory in Intune/GLPI: model, serial, user, installed apps, encryption, updates.
A laptop is lost in a taxi — with documents, email, passwords
BitLocker mandatory on every laptop, remote wipe from Intune, forced encryption of external drives.
What is included
Clear boundaries: what is covered by the retainer and what is a separate project.
Included in the service
- Golden images for Windows 10/11 and macOS with pre-installed corporate software
- Mass deployment: MDT, SCCM, Intune Autopilot, Jamf for Mac
- WSUS / Intune Update Rings — controlled updates per group
- Central software deployment: Chocolatey, winget, PDQ Deploy, Intune Apps
- Inventory: GLPI, OCS Inventory, Snipe-IT, Intune Device Inventory
- Remote support: TeamViewer, AnyDesk, RustDesk, QuickAssist
- Disk encryption (BitLocker / FileVault), USB and flash-drive control
Not included / separate project
- Hardware repair — handled via service partners
- Direct hardware purchase — we connect a reseller, contracting is on your side
- Installing unlicensed software — we don't
What is actually included in the contract
When we sign — both sides know exactly what you pay for and what you get. These are the four planes the SLA is built on.
Coverage hours
- Business hours: Mon–Fri 08:00–20:00, L1 with guaranteed response
- On-call evenings and weekends on request
- 24/7 for critical services: mail, 1C, UNA, POS, website, VPN
- Scheduled night windows for planned work without downtime
Contact channels
- Single ticket portal with history and SLA timers
- Hotline phone for P1 incidents
- Email and Telegram bot for routine tasks
- User chat with our on-duty engineer during business hours
Priorities and response
- P1 (critical, service is down): response in 15 minutes, 24/7
- P2 (severe impact): response within 1 hour in business hours
- P3 (single-user issue): response within 4 hours
- P4 (planned work, improvement): scheduled for the coming week
Contract scope of work
- Planned maintenance: updates, backups, monitoring, patch management
- Incident management: diagnostics, recovery, postmortems
- Small projects within the retainer: up to N hours per month
- Large projects (migrations, new equipment) — separately scoped
Technologies and tools
What we work with in this area.
Microsoft Intune
WSUS
MDT
SCCM
Autopilot
Chocolatey
winget
GLPI
BitLocker
Jamf
How we onboard a new client
1
Kickoff and brief
30–60 minutes online or in the office: we discuss the business, the key systems, and the incidents that hurt last year. We sign an NDA.
2
Technical audit and risk map
1–2 weeks. Equipment inventory, checks on servers, network, backups, security, 1C/UNA, licensing. The outcome is a report with a risk map and priorities.
3
Work plan and contract
We build the plan: what gets fixed right away (P1 risks), what in the first month, what in the first quarter. We lock the SLA, hours, channels, price. We sign the contract.
4
Onboarding and infrastructure handover
We take over the access via a secure password manager, deploy our monitoring, plug in the ticket system, train the employees. The previous admin (if any) hands off by the playbook.
5
Ongoing operations and reporting
Monthly report: incidents, planned work, new risks, recommendations. Quarterly review with the CEO/CFO: strategy, budgets, major changes.
Intune + Autopilot rollout for a 400-laptop retail network across 15 branches
Retail chain, 15 branches, Moldova + overseas locations
Задача
Laptops set up manually, updates lagging by months, some without encryption, no inventory.
Решение
Rolled out Intune + Autopilot, policies, encryption, updates. New laptops shipped directly from reseller to the employee — the box arrived at the branch.
- 30 minutes (was 1 day)New laptop setup time
- 98%Devices up to date
- 100% (was 40%)Devices encrypted
Frequently asked questions about this service
Can we go without Intune — just GPO and WSUS?
Yes, for on-prem infrastructure without cloud. But for mobile workers and remote staff Intune/MDM gives control GPO cannot.
Do you manage Macs too?
Yes. Intune or Jamf for Mac, depending on requirements. BYOD scenarios via Intune App Protection.
How does this work for remote employees?
Intune and Entra ID work over the internet, no VPN needed. The laptop is managed regardless of location. VPN is only required for internal services.
What about developers' Linux laptops?
Intune partially supports Linux (via Edge policies). For full control we use Ansible and custom inventory scripts.
Let us talk about your IT
The first meeting — 30 minutes, free, no strings attached. We will tell you whether we are the right fit and what is worth doing first.