Project 2: On-Premise Windows 10 to Entra ID Joined Windows 11

Project 2 Architecture

This project focused on modernizing the endpoint infrastructure by transitioning from on-premise, domain-joined Windows 10 devices to a fully cloud-based, Entra ID joined Windows 11 environment. The aim was to enhance security, simplify device management, and provide a better user experience.

Challenges

  • Ensuring a smooth transition for users with minimal disruption.
  • Migrating user profiles and data securely.
  • Managing application compatibility with Windows 11.
  • Configuring and enforcing security policies in a cloud environment.

Solution

Microsoft Endpoint Manager (Intune) was used to manage the migration process. Windows Autopilot was leveraged for device provisioning and user-driven deployments. User data was migrated using OneDrive for Business. Application compatibility was assessed and addressed using application packaging and virtualization technologies.

Technologies Used

  • Microsoft Entra ID
  • Microsoft Endpoint Manager (Intune)
  • Windows Autopilot
  • OneDrive for Business
  • Windows 11

Architecture

                                        %%{init: {'theme': 'base', 'themeVariables': { 'primaryColor': '#e6f3ff', 'fontFamily': 'arial' }}}%%                                        graph TD
                                            subgraph "On-Premise"
                                                A[Domain-Joined Windows 10] --> B(Active Directory)
                                            end
                                            subgraph "Azure Cloud"
                                                C[Entra ID Joined Windows 11] --> D(Microsoft Entra ID)
                                                C --> E(Intune)
                                                F[OneDrive for Business]
                                            end
                                            A <--> C
                                            B <--> D

Outcome

The successful migration to Entra ID joined Windows 11 resulted in improved security posture and simplified device management. Users benefited from a more modern and streamlined experience. The project also laid the foundation for a Zero Trust security model.