Network, endpoint and MDM services
Run a fast, secure office network and keep every laptop and phone managed and protected.
- Network
- UniFi · VPN · Firewall
- Systems
- Windows Server · AD
- Devices
- Jamf · Apple Business
- Includes
- Patching
Who our network and endpoint service is for
We build office networks and manage the laptops and phones connected to them. That covers firewalls, VPNs and segmentation through to Active Directory, Jamf and patching.
- Companies opening or moving offices
- Teams with remote staff who need secure access to internal systems
- Organisations with Mac fleets that need Jamf and Apple Business
- IT teams without time to keep servers and devices patched
Before
- Consumer routers and one shared Wi-Fi password
- Laptops set up by hand, never updated
- No way to wipe a lost device
After
- Firewall, VLANs and separate guest Wi-Fi
- Devices enrolled and patched automatically
- Lost devices locked or wiped remotely
Intune and Windows Autopilot
Microsoft Intune manages Windows laptops, phones and tablets from the cloud: compliance policies, BitLocker encryption, Windows Update rings, app deployment and conditional access, so only healthy devices reach company data. We design the policies, pilot them with a small group and roll them out without locking anyone out.
With Windows Autopilot, a new laptop can be shipped straight to an employee; they sign in and it configures itself with your apps and settings. We register devices, build the Autopilot profiles and document the process for your team.
Apple devices: Apple Business and Jamf
For Mac, iPhone and iPad fleets, Apple Business (formerly Apple Business Manager) assigns company-owned devices to your MDM automatically, so they enrol and configure on first start. We set up Apple Business, managed Apple Accounts and app distribution.
On top of it we deploy Jamf Pro or Intune for Apple devices, depending on your mix: FileVault encryption, software updates, configuration profiles and remote lock or wipe. You get documented policies and a clear process for onboarding and offboarding devices.
What you get from network, endpoint and MDM services
Named documents and outcomes you keep. Scope is agreed per engagement.
- 01
Site survey
Current network, Wi-Fi coverage and devices, documented.
- 02
Network design
Firewall, VLANs, Wi-Fi and VPN layout.
- 03
Device policies
Encryption, updates, EDR and compliance rules for laptops and phones.
- 04
Device compliance board
Every device with encryption, patch and EDR status.
- 05
Configuration backup
Saved firewall and switch configurations.
- 06
Monthly health report
Patching, compliance and alerts for the month.
How a network and MDM project runs
Open each phase to see what it produces and who does what.
Sample network and endpoint deliverable
An illustrative sample with placeholder names and data, not a real client document.
Devices (sample)
5
Compliant (sample)
3
Need action (sample)
2
| Device | OS | Encryption | Patch level | EDR | Compliant |
|---|---|---|---|---|---|
| LAP-001 | Windows 11 | On | Current | Defender for Endpoint | Yes |
| LAP-002 | Windows 11 | On | Current | Defender for Endpoint | Yes |
| MAC-003 | macOS | On | 1 behind | Defender for Endpoint | No |
| LAP-004 | Windows 11 | Off | Current | Defender for Endpoint | No |
| PH-005 | Android | On | Current | Defender for Endpoint | Yes |
Network and endpoint engagement formats
Fixed-scope project
- When it fits
- You have a defined outcome: a migration, a test, a certification or a rollout.
- Included
- Agreed deliverables, a named lead, progress updates and handover.
- How it is priced
- Quoted after a scoping call; the price depends on the number of users, sites, applications or controls in scope.
Ongoing support retainer
- When it fits
- You want someone to run, monitor and improve things month after month.
- Included
- Monitoring, changes, reviews and a monthly report within an agreed scope.
- How it is priced
- A monthly fee quoted after a scoping call, based on users, devices and systems covered.
Advisory hours
- When it fits
- Your team does the work and wants expert review or answers.
- Included
- Calls, document and design reviews, and written recommendations.
- How it is priced
- A block of hours agreed in advance; the rate is quoted after a short call.
Network and endpoint tools we use
- Firewalls
- VPN
- Windows Server
- PowerShell
- Linux
ITCCS is an independent consultancy. Product names and logos are trademarks of their respective owners, shown only to identify the platforms we work with. No partnership, certification or endorsement is implied.
Standards for network and endpoint
- ISO/IEC 27001Information security, certification-ready ISMSLearn moreRead about ISO/IEC 27001
- NIST CSF 2.0Security programme baselineLearn moreRead about NIST CSF 2.0
- CIS Controls v8.1Practical hardening prioritiesLearn moreRead about CIS Controls v8.1
We implement and prepare organisations for these standards. Certification is issued by accredited bodies.
Related certifications
All certificationsUniFi is what we deploy most for small and mid-sized offices because of its central management. We also configure other firewalls and switches already in place.
Yes. We set up remote user VPN with MFA, or move access to cloud identity where that is simpler and safer.
Apple's free platform for organisations to buy, enrol and manage devices. It replaced Apple Business Manager in April 2026.
Yes, through Active Directory and group policy, Microsoft Intune where licensed, and scheduled patching.
On-site work is arranged per project. Most configuration, monitoring and support is delivered remotely.
The number of sites, users and devices, the network hardware involved and whether you want ongoing management.
We use named accounts with the least access needed, prefer your own admin tools over shared passwords, move files only through encrypted channels and remove our access at handover. For networks and MDM we use named accounts in your UniFi, firewall, Intune or Jamf consoles, with configuration backed up before every change. Our full practices are on our Trust page.
We keep devices patched and compliant and the network monitored under a support retainer, or hand over to your IT team with full documentation.
Let's build what's next.
Tell us about your infrastructure, security or automation goals. We reply with questions, then a written plan with scope and next steps.
- Response
- Usually within one business day
- Location
- Worldwide
What happens next
- 01
Reply
- 02
Discovery call
- 03
Proposal