Zero-trust cloud workspace
Designed a workspace where company data never lives on the laptop, using Microsoft 365 E5 and Windows 365 with a four-week delivery plan.
The goal
A small business wanted staff to work from anywhere without company data ending up on laptops that could be lost, stolen or shared.
The design
- Cloud PCs with Windows 365. Staff work on a Windows desktop that runs in Microsoft’s cloud. The laptop only displays the screen and sends keyboard and mouse input; the data stays in the cloud.
- Identity and security from Microsoft 365 E5. Strong sign-in controls and threat protection apply to every session.
- Device management with Intune. Laptops are enrolled and checked, so only managed, healthy devices can connect.
- A four-week delivery plan that breaks the rollout into clear stages.
Outcome
The client received a full architecture and a four-week delivery plan.
What others can learn
- The safest data is data that is not there. If nothing is stored on the laptop, a lost laptop is an inconvenience, not a breach.
- Zero trust is a set of checks, not one product. Who is signing in, from which device and how healthy that device is should all be verified every time.
- Small teams can do this too. Cloud PCs make this level of protection practical without a large IT department.