What's included
- Windows Server deployment, upgrades and migration off end-of-support versions
- Active Directory: design, domain and forest migration, Group Policy, trusts, health checks and clean-up
- DNS and DHCP: design, failover, scavenging and clean-up
- RADIUS with Network Policy Server for Wi-Fi, VPN and switch sign-in
- Remote Desktop Services (terminal servers): session hosts, gateway, licensing, RemoteApp
- IIS web servers: sites, application pools, certificates, hardening
- Certificate services (AD CS): internal PKI, templates, auto-enrolment, renewals
- File, print, WSUS, failover clustering
- Hybrid identity with Microsoft Entra ID: sync, single sign-on, MFA
- System Center: see the next page
Core identity services
Text version of this diagram
- Users and devices → Active Directory
- Active Directory → DNS and DHCP
- Active Directory → Certificate services
- Active Directory → RADIUS / NPS
- RADIUS / NPS → Wi-Fi and VPN
- Active Directory → Remote Desktop Services
- AD < → Microsoft Entra ID
Who it's for
- Organisations running Active Directory and Windows Server
- Companies with servers on unsupported Windows versions
- IT teams moving identity to Microsoft 365
What you get
- Health check of Active Directory, DNS, DHCP and PKI
- Upgrade or migration plan, role by role
- Hardened, documented configuration
- Hybrid identity with single sign-on and MFA
Questions
Our Active Directory has years of leftovers. Can you clean it up?
Yes: a health check first, then a staged clean-up with rollback.
Can you move us to a newer Windows Server version?
Yes, role by role, with no big-bang cut-over.
How long does an Active Directory health check take?
For most organisations a few days, ending with a report ranked by risk.