As working patterns evolved, a leading UK investment advisory firm recognised that its traditional approach to managing corporate devices no longer aligned with the way employees accessed company data. The organisation wanted to embrace a modern, cloud-first management model that would improve security, support flexible working and reduce reliance on on-premises infrastructure.

Intelogy partnered with the client to design and deliver a Microsoft Intune solution that strengthened device security, introduced zero-trust principles and laid the foundations for modern endpoint management across the business. The engagement covered discovery, solution design, implementation and the seamless migration of devices into a secure Microsoft 365 environment.

With employees working from a wider range of locations and devices, the organisation needed greater visibility and control over how company data was accessed.

At the same time, they wanted to reduce their dependence on a traditional on-premises Active Directory domain and adopt a more modern approach to endpoint management that would support future growth while improving security and governance.

The challenge was to introduce these changes with minimal disruption to users, while ensuring devices remained secure, compliant and easy to manage throughout the transition.

We helped our client move away from traditional, on-premises device management and embrace a modern, cloud-first approach built around Microsoft Intune.

The new platform gave the organisation a consistent way to manage and secure every device accessing company data, whether employees were working in the office, at home or on the move. Corporate devices were enrolled into Intune, while App Protection Policies enabled employees to securely access Microsoft 365 applications from personal devices without company data being stored outside of approved locations.

To strengthen security without creating unnecessary barriers for users, Intelogy introduced Conditional Access policies that ensured only trusted users on compliant devices could access business resources. Windows Hello for Business provided a more secure, password-less sign-in experience, while Windows Autopilot simplified the deployment of new laptops, allowing devices to be securely configured with minimal IT intervention.

Once the new environment had been fully tested, devices were migrated in phases from the legacy Active Directory domain to Microsoft Entra ID and Microsoft Intune. By the end of the project, the organisation had a modern endpoint management platform that was easier to administer, more secure by design and ready to support future ways of working.