Client success stories

Enterprise cloud desktops.
Built for the real world.

ICT Premier deploys Azure Virtual Desktop environments for the SME sector — transparent pricing, on time, and managed end-to-end so your team doesn't have to think about it.

5 wks
Transparent, on-time deployment
70+
Staff migrated across 3 sites
0
Client files on personal devices
SME · Professional Services
Replaced a failing VPN with a managed cloud desktop — 70+ staff, 3 locations, zero data sovereignty risk.
Professional Services Firm
Melbourne CBD + 2 regional
70+ staff across 3 sites
5 weeks, fixed price
Azure AVD · Intune · Defender
The problem
A legacy VPN, unmanaged laptops, and sensitive client data sitting on personal devices.

A site-to-site VPN deployed four years prior was slow, unreliable, and a constant source of complaints from regional staff — particularly during video calls and file transfers.

Staff worked from a mix of personal and company-owned devices with no MDM in place. The firm had no visibility into what was installed, whether devices were encrypted, or when patches last ran.

The finance team routinely handled sensitive client files on unmanaged laptops that had never been audited or assessed for security posture — a liability the firm's principals had flagged repeatedly.

A near-miss phishing incident prompted the firm to require a solution where data would never leave the company's controlled environment — regardless of which device staff used.

The solution
Personal host pools for the finance team. Pooled desktops for all-staff access. Data stays in Azure — always.
1
Weeks 1–2
Azure foundation
  • Azure subscription structured with Resource Groups by workload type — network, compute, storage, images
  • VNet and NSGs deployed, all session hosts using AVD reverse-connect — no inbound firewall rules required
  • Existing Microsoft 365 tenant used as identity source — no additional directory infrastructure needed
  • Azure Files provisioned with Entra Kerberos for identity-based share access; data stays in Australia East
2
Weeks 2–4
Host pools & golden image
  • Golden image built on Windows 11 Enterprise Multi-Session — M365 Apps with Shared Computer Activation, line-of-business apps pre-installed
  • Personal host pool for finance team — dedicated session host per user, 1:1 assignment, data never touches a personal device
  • Pooled host pool for general staff — 5× D4as_v5, BreadthFirst load balancing, Start VM on Connect enabled
  • FSLogix configured — user profiles stored in Azure Files, VHDX mounts at login, seamless across all sessions
3
Weeks 4–5
Security & compliance
  • All session hosts enrolled into Intune — Entra ID joined, no on-premises domain controller dependency
  • Defender for Business activated with real-time protection, EDR visibility, and ASR rules in audit-then-enforce mode
  • Conditional Access: MFA enforced on all AVD access; sessions geo-restricted to Australia; legacy auth blocked firm-wide
  • VPN infrastructure decommissioned on go-live day — no parallel running period required
The outcomes
Full management visibility. Zero data on personal devices. VPN gone for good.
100%
Of staff on Intune-managed desktops — including regional offices
0
Client files stored on personal or unmanaged devices — ever
AUSE
All data in Azure Australia East — data sovereignty requirement met
E8
ASD Essential Eight alignment — MFA Level 2, patching, application control
"Our partners were uncomfortable knowing client files were on personal laptops. Now the data never leaves Azure. Staff open the AVD client wherever they are and they're straight in. The VPN is gone and nobody misses it."
Practice Manager · Professional Services Firm · Melbourne CBD
Technology stack
Designed for compliance, built to last, managed remotely by ICT Premier.
Azure Virtual Desktop Personal & Pooled Host Pools Windows 11 Enterprise Multi-Session Microsoft 365 Business Premium Microsoft Intune Defender for Business FSLogix Azure Files (Standard LRS) Entra Conditional Access Azure Australia East

Ready to move your team to a managed cloud workspace?

ICT Premier handles everything — from Azure provisioning to day-one staff training. Transparent-pricing engagements for schools and SMEs.

Book a Consultation → You'll talk to an engineer, not a call centre.