Windows 11 SOE:

Development of a Windows 11 SOE solution built on cloud-native Microsoft Intune and Entra ID that removes the reliance on legacy on-premises platforms and provides AFMA with a modern unified desktop computing environment and removes the reliance on legacy on-premises platforms and systems.

The key architectural components of the solutions are:

• Windows 11 24H2: The latest version of the Microsoft Windows 11 operating system.
• Microsoft Intune device management: Modern cloud-only device management and security platform.
• Microsoft Entra joined devices: Devices joined only to the Microsoft Entra platform for modern cloud identity management.
• Windows Autopilot: A cloud-native deployment and imaging solution for Windows devices.
• Windows Hello for Business: A modern authentication method that lets users sign in to their devices and accounts using biometrics or passkeys.
• Microsoft Entra Kerberos SSO: Allows seamless access across both cloud and legacy on-premises applications using existing credentials.
• Windows Defender for Endpoint: A cloud-based endpoint security platform that provides advanced threat detection and response.

The end state of this solution will provide AFMA with an end user computing environment separate to existing legacy Active Directory Domain Services (AD DS) and on-premises environments, while still enabling authentication and single-sign-on to existing applications and services hosted across on-premises and cloud platforms.

Remote Access Solution:

Development of a Azure Virtual Desktop (AVD) VDI solution built on cloud-native Microsoft Intune and Entra ID that provides AFMA with a modern unified desktop computing environment consistent with physical machines and removes the reliance on legacy on-premises platforms and systems.

The key architectural components of the solution are:

• Azure Virtual Desktop: Azure cloud hosted VDI infrastructure and virtual desktop management.
• Windows 11 24H2 Enterprise Multi-Session: Scalable multi-session Azure virtual machine infrastructure.
• Microsoft Intune device management: Modern cloud-only device management and security platform.
• Microsoft Entra joined devices: Devices joined only to the Microsoft Entra platform for modern cloud identity management.
• FSLogix: Intelligent user profile management solution for multi-session VDI infrastructure.