Case studies
From practice.
No names, just facts.
A selection of assignments I have carried out in recent years. Client names are left out; the situation, my contribution and the result are as they were.
01
Device management as the sole IT engineer for around 400 users
European e-learning organisation · Windows and macOS · 2025–2026
A cloud-first organisation with around 400 staff spread across Europe and no IT department of its own. New starters had to be up and running quickly and securely, on both Windows and macOS.
What I did
- Set up and managed Intune: configuration profiles, compliance, security baselines and app distribution
- Zero-touch provisioning: Windows through Autopilot, the Mac fleet through Apple Business Manager
- Automated joiner-mover-leaver provisioning with PowerShell and Microsoft Graph
- Final escalation point for device, access and email issues
- Wrote management procedures, guides and user instructions
Result
New laptops are set up without manual work, and accounts are created and removed through a fixed, automated process. Management and procedures are documented and transferable.
02
AD and device migration for more than 1,200 users
International information services company · multiple Dutch locations · 2023
A business-critical migration of Active Directory and devices for more than 1,200 users across multiple Dutch locations. Work had to continue during the transition.
What I did
- Prepared, planned and validated migrations per group with Quest Migration Manager
- Carried out AD and device migrations at multiple locations
- Post-migration PowerShell scripts for profiles, settings and network configuration
- Supported users during and after the migration, with aftercare per group
Result
The migration was completed group by group, with aftercare for each group. Recurring fixes after the switch ran through scripts instead of manual work per device.
03
Network segmentation and redundant firewalls
Organisation with its own server environment · OPNsense · 2026
Servers, virtual machines, storage and backup all sat in one network. Separation, redundancy and secure remote access were needed.
What I did
- Two OPNsense firewalls as a high-availability pair with CARP and configuration sync
- Five VLANs (servers, virtual machines, storage, backup and remote access) with rules per VLAN
- Switch ports configured as trunk or access for the hypervisor, NAS and firewalls
- Structured IP plan and DHCP per VLAN
- Site-to-site VPN with WireGuard and remote access through OpenVPN
- Documented the setup and decisions
Result
Each type of system sits in its own segment with its own access rules. If one firewall fails, the second takes over automatically. Remote management runs over VPN.
04
Standardised devices in education
Educational institution · multiple locations · 2023–2025
An educational institution with multiple locations and shared devices in classrooms and study areas, used by many different people.
What I did
- Rolled out and standardised Windows 10/11 devices with Intune and Autopilot
- Managed updates, compliance and applications for a wide range of user groups
- Hardened devices and services; set up email security
- Prepared, tested and documented changes following ITIL in TOPdesk
- Second- and third-line troubleshooting and support for colleagues at the locations
Result
One standardised device setup for every location, managed from Intune, with changes tested and documented in advance.
I also work for IT service providers, for example on an external vulnerability scan of 40 IP addresses and an on-site Intune review. Before going independent, I spent four years as a system administrator at an MSP, fully managing IT for several SMB organisations.
Your next step
What does your
IT environment need?
For a project or a one-off assignment, tell me about the problem and what you want to achieve. We can then discuss the approach and scope.