KEVIGS Modernises Device Management and Security with Intune

Challenge 

KEVIGS previously relied on an on-premises infrastructure, using Group Policy Objects (GPO) and a Windows Server Update Services (WSUS) environment to manage devices and apply security updates. However, with the increasing adoption of cloud-based technologies and a growing number of personal devices accessing school resources, the existing setup was becoming inefficient and difficult to scale. KEVIGS needed a more flexible and centralised solution that could not only manage school-owned devices but also support BYOD initiatives, ensuring security and compliance across all endpoints. The challenge was to migrate from the legacy infrastructure to a cloud-based environment without disrupting daily school operations. 

Solution 

PSP’s Education Director of ICT led the implementation of a new Microsoft Intune environment, designed to replace the school’s existing on-premises systems and provide seamless management of all devices. The project began by replacing traditional GPOs with cloud-based configuration profiles in Intune, allowing KEVIGS to manage devices remotely and apply policies uniformly across school-owned devices. This move significantly reduced the complexity of managing various configurations and enhanced the ability to implement changes swiftly. 

To further modernise their infrastructure, we created update rings in Intune to replace the school’s on-premises WSUS environment. These update rings allowed the IT team to control how and when updates were deployed to different device groups, ensuring that all endpoints remained secure and up-to-date with the latest patches. PSP also established security and compliance baselines within Intune, providing KEVIGS with the ability to monitor device health and enforce security policies automatically. 

Additionally, we enrolled KEVIGS’s on-premises servers into the Microsoft 365 using Microsoft Arc, enabling centralised oversight and streamlined security patch management. This integration allowed KEVIGS to maintain visibility and control over all servers, regardless of location, enhancing the security and management of their on-premises infrastructure. As part of the project, PSP enrolled all new laptops and desktops into the newly created Intune environment, ensuring that every device was set up and managed according to the new standards from day one. 

Results 

The successful deployment of Microsoft Intune transformed how KEVIGS manages and secures its digital environment. By shifting from on-premises GPO and WSUS to Intune’s cloud-based configuration profiles and update rings, KEVIGS gained a more streamlined, scalable and flexible device management solution. The new setup allows the IT team to manage all devices—whether school-owned or BYOD—from a single, unified platform, reducing administrative overhead and improving response times to security and compliance issues. 

With Microsoft Arc integration, KEVIGS’s on-premises servers are now centrally monitored and patched, significantly enhancing security and simplifying server management. The newly established compliance baselines provide continuous monitoring, ensuring that all devices meet security standards and reducing the risk of vulnerabilities. The implementation of Intune has also paved the way for future growth, providing KEVIGS with a robust foundation to support their evolving digital strategies. 

Conclusion 

PSP’s implementation of a cloud-based Microsoft Intune environment for King Edward VI Grammar School delivered a modern, efficient and secure solution that replaced their legacy systems and enhanced their device management capabilities which can scale as needs require. By integrating Intune and Microsoft Arc, PSP provided KEVIGS with centralised oversight and robust security management for both endpoints and servers. This project not only streamlined device management but also empowered the school to support its BYOD policy securely, demonstrating PSP’s expertise in driving digital transformation in the education sector.