delivery record
Intune Greenfield for 200 endpoints
A dedicated endpoint platform as the foundation for strategic independence.
Client: SOS-Kinderdörfer weltweit Website: www.sos-kinderdoerfer.de Scope: 200 Windows laptops, about 25 centrally managed applications Timeline: Q1 2026 – go-live Q3 2026 Model: Windows Autopilot User-Driven FairPlay role: Project lead, architecture, tenant configuration, test concept Status: Ongoing – 72% test coverage as of 06/2026
Starting point
SOS-Kinderdörfer weltweit had previously used the Microsoft tenant of its parent organisation. Building a dedicated tenant made a fully autonomous endpoint platform necessary: greenfield, without legacy baggage.
Challenge
- Greenfield setup without a migration path
- Sector and specialist applications distributed through two channels
- Certificate-based RADIUS Wi-Fi on first devices
- A consistent security level without user friction
Approach
FairPlay designed and coordinated a Windows Autopilot platform with Enrollment Status Page, a compliance policy with 7 conditions, RADIUS/certificate Wi-Fi, BitLocker key escrow in Entra, EDR/VPN/web filtering in coexistence with Defender, USB device control, update rings, and Windows 365 Cloud PC.
Around 25 applications are assigned through department-specific groups. The central project KPI is a test plan with about 140 test cases across 9 categories and 5 testers.
Result
| Result area | Status |
|---|---|
| Endpoint platform | 200 devices zero-touch ready from go-live |
| Test coverage | 72% as of 06/2026 |
| Security baseline | Unified and usable as audit evidence |
| Onboarding | Scalable without on-site IT effort |
| Tenant autonomy | First fully owned endpoint platform in the dedicated tenant |
Core message
Intune is the enabler. Real IT independence starts at the endpoint layer.