Building the Foundation for a Modern Desktop at Pennon

Designed strategically, deployed collaboratively - and ready for scale.


When Pennon decided it was time to evolve their desktop estate, the focus wasn’t just on modernisation - it was on doing it right. From day one, our approach was grounded in planning, partnership, and delivering something the organisation could build on long after the project concluded.


At INTEGY, we believe that the journey to a Modern Desktop begins with vision - a clear understanding of how people work, what the business needs, and how technology can empower that. With Pennon, we brought our Microsoft Intune Accelerator for Windows engagement to bear, helping them move with confidence toward a cloud-native, secure, and user-centric desktop environment.



Strategic Design First - Always


The success of any transformation begins with design. Working closely with the local team at Pennon, we provided clear guidance on what a modern desktop platform should look like, aligned to best practice and CIS benchmarks. Together, we shaped a blueprint for a scalable, cloud-first environment anchored in Microsoft Intune and Entra ID.


Rather than following the traditional hybrid-join model often a comfort blanket for legacy thinking we advocated strongly for an Entra ID-first approach. While there was some initial scepticism, especially with back-end workloads still joined to on-premises Active Directory, we demonstrated how modern identity architecture bridges these worlds securely and seamlessly.


Through Kerberos Cloud Trust, we enabled secure access to legacy resources using modern authentication tokens device, PRT (Primary Refresh Token), and Kerberos without compromising the cloud-native principles that make modern desktop management scalable and flexible.


This wasn’t about compromise. It was about doing it properly.



Making Intune Ready - Day One and Beyond


Our role was to make sure Pennon’s environment wasn’t just technically capable of using Intune  but ready to make the most of it.


We configured and deployed user and device enrolment profiles tailored to Pennon’s needs. This included building out policy baselines aligned to the CIS framework, enabling device hardening, BitLocker encryption, Windows Update for Business configurations, and Attack Surface Reduction rules to elevate security from day one.


We ensured Windows Hello for Business was available as a passwordless authentication method from the start — improving both user experience and security posture.


We also packaged key applications for deployment, ensuring users had what they needed from the first login. Every element was aligned with cloud-first principles: automated, managed, secure.



Built with the Customer, Not Just for Them


What made this project different was the way it was delivered. This wasn’t a hand-off. It was a collaborative build. We worked incredibly closely with Pennon’s internal teams, providing not only the technical skills to configure and deploy, but the design insight and mentorship to enable their staff to take ownership of the platform going forward.


Upskilling wasn’t a tick-box exercise  it was embedded in every step. We made sure the local team understood the rationale behind decisions, the mechanics of delivery, and how to operate and evolve the solution after handover.

Pennon now has a fully functioning, scalable Modern Desktop capability that aligns with Microsoft’s Modern Work vision  and it’s theirs to grow.



This Is What We Do


As a Microsoft Partner with the Modern Work Enterprise designation, this is our space. We don’t just deploy technology we help organisations realise its potential, properly. Whether you’re looking to modernise device management, improve security, adopt cloud identity, or deliver better experiences for your users, we’re here to help you plan, build, and succeed together.


At INTEGY, we offer value from day one. That’s what Pennon experienced and that’s what we bring to every engagement.

Call us today on 01392 796525 or Email us at ask@integy.co.uk

Braunton Academy and INTEGY
By James Cook May 9, 2025
INTEGY is delighted to announce the extension of our partnership with Braunton Academy for a further two-year period, continuing our delivery of a comprehensive fully managed IT services solution tailored to the education sector.
Microsoft 365 Business Premium
By Ryan Jewell April 23, 2025
INTEGY moved CCSS to Windows 11 and M365 Business Premium, this case study describes the process
Supporting the UK Governments Transition to Windows 11
By Ryan Jewell April 22, 2025
Integy helped the UK Government upgrade from Windows 10 to Windows 11
December 16, 2024
At INTEGY, we’re passionate about enabling organisations to embrace the future of work, especially when innovation and agility are at the heart of their mission. Recently, we had the privilege of supporting a client whose business serves as a launchpad for startups, providing the technology and equipment needed to kickstart their journey.  The Challenge: Outdated IT for a Growing Organisation Our client’s IT infrastructure was a traditional setup, with user accounts and devices tightly bound to Active Directory. This configuration required devices to maintain network connectivity to on-premises servers, creating operational limitations. With the facility expanding to three separate locations, this approach no longer supported their need for flexibility, scalability, and efficiency. Startups thrive on speed and adaptability, and their IT systems needed to reflect those principles. The reliance on traditional IT was slowing them down, creating unnecessary overhead, and limiting their ability to provide the seamless experience their customers expected. The Solution: A Cloud-Native Transformation We transformed their IT environment into a modern, cloud-native setup: Entra ID for Identity Management Every device is now joined to Entra ID (formerly Azure AD), shifting identity management to the cloud. This eliminates the need for on-premises servers, offering secure access from anywhere. Intune for Device Management Devices are now managed through Microsoft Intune, enabling streamlined policy enforcement, application deployment, and security updates, all delivered from the cloud. Enhanced Security with Zero Trust Principles We implemented a Zero Trust security model, ensuring that devices and users are authenticated and compliant before accessing resources. Defender for Endpoint provides enhanced threat protection and visibility across their environment. Simplified User Experience By decoupling devices from on-premises dependencies, we empowered their users to work from any location with a secure, seamless experience. Scalability and Agility With their new cloud-native IT framework, our client is no longer constrained by physical infrastructure. They can now scale operations effortlessly as they open new locations and onboard new startups. The Results: Flexibility, Efficiency, and Growth The move to a cloud-native configuration has been a game-changer for our client. They’ve gained: Operational Efficiency : IT management is simpler and faster, reducing administrative overhead. Improved User Experience : Users now enjoy consistent and reliable access to systems, regardless of location. Scalability : Expansion to new sites no longer requires complex IT overhauls. Security : Advanced cloud security tools ensure their data and devices remain protected. By embracing modern IT, our client is better positioned to serve their customers and focus on what matters most: empowering innovation for startups. Helping You Move Forward If your organisation is grappling with the limitations of traditional IT and looking to make the leap to a cloud-native future, we’re here to help. Let’s transform your IT and unlock your potential.
September 19, 2024
From Horizon to Azure Virtual Desktop, INTEGY help deliver a successful migration
Windows 11
August 22, 2024
Case Study: A Phased Approach to Standardising on Windows 11—Strategic Budget Management and Strong Partnership
iboss managed service
August 22, 2024
this case study describes how INTEGY have created an iboss managed service to help organisations have leading web and security protection.
Unifi Network
August 22, 2024
This case study covers how we transformed a schools wired and wireless network provision.
Intune Packaging
August 22, 2024
Application Packaging activities completed or local authority via GCloud contract
IT Support for Braunton Academy
May 8, 2024
Integy provide IT support for Braunton Academy, delivering IT Support and Migration from Google to Microsoft
More Posts