Free assessment
Find out what your devices are actually running
Not whether Intune says the estate is compliant, but whether that means what you think it means: what is enrolled, what has gone quiet, which policies are actually winning, and what you could prove if somebody asked.
Who books this
- You could not currently prove every device was patched inside a fourteen-day window
- Devices report as compliant and you are not confident in the number
- You are running Configuration Manager and have been told to move to Intune
- Nobody has reviewed the policies in the tenant since whoever set it up left
What you get
- What is enrolled against what should be, including the devices that have gone quiet
- An honest read on your compliance figure and what it is actually measuring
- Conflicting and superseded policies, and which one is winning where it matters
- A straight answer on what you could evidence today and what you could not
What we need from you
- Read access to Intune, and to Configuration Manager if you run it
- A rough idea of how many devices should be enrolled, so we can reconcile against what is
- Any framework or insurer question you are being asked to evidence
When not to book this
If you already report on this properly and could produce a quarter of patching evidence this afternoon, you do not need us for this. That puts you ahead of most estates we see, and the review would only confirm it.
Other assessments
- Microsoft estate review: Forty-five minutes and a written summary. What you are licensed for, what is switched on, where the gaps are, and what we would fix first.
- Security posture review: Most of what we find is not missing products. It is features you already pay for that were never switched on. Forty-five minutes to find out which.
- Cloud cost review: Non-production running around the clock, orphaned resources nobody decommissioned, and licences still assigned to leavers. Forty-five minutes to quantify yours.
- Cyber Essentials readiness check: The five control themes, checked against what you actually run. Most first-time failures are the same handful of things, and all of them are cheaper to fix before you apply.
- Application compatibility assessment: Migrations do not stall on operating systems, they stall on a handful of applications nobody can account for. This sorts your estate into the four groups that actually matter, before you commit budget to any of it.
- Virtual desktop review: Whether you are choosing between Azure Virtual Desktop and Windows 365 or already running one and paying more than you expected, this is the same review: what the estate is doing, what it costs, and what it should cost.
- Copilot readiness check: Copilot does not grant anyone a single permission they did not already have. It just makes what they already had very easy to find, which is why the permissions work belongs before the licences and not after.
- Backup and recovery review: Everyone has a backup. Far fewer have a restore. The question worth answering is not whether jobs are running, it is when somebody last proved one and how long the business would be down.
- Application and reporting discovery: Most bespoke software goes wrong at scoping rather than in the build, and the most valuable thing a first conversation can do is establish whether you should be commissioning software at all.
