Modern Workplace
$147 per user / month, ex GST
$147 per user per month, ex GST — includes Intune device management and supported-device patching.
View Modern WorkplaceK2CT / Endpoint Management
Secure, manageable devices. Productive people.
Business devices should be straightforward to deploy, support and secure. K2CT helps organisations manage endpoint technology consistently, whether their people work in an office, remotely or across multiple sites.
What endpoint management covers
Endpoints are the laptops, desktops, phones and tablets your people use every day. Endpoint management applies consistent configuration, security and software to those devices from the cloud, so they can be set up, supported and retired without anyone needing to touch them in person.
Business problems
Why unmanaged devices cost more
When devices are set up by hand, every one ends up slightly different.
Slow, manual set-up
New starters wait for a laptop to be built and configured one step at a time.
Inconsistent security
Encryption, updates and security settings vary from device to device.
Limited visibility
It is hard to know which devices exist, who has them and whether they are compliant.
Lost or departing devices
Company data stays on devices that are lost, stolen or never returned.
Services
Endpoint management services
Built on Microsoft Intune and integrated with your Microsoft 365 environment.
Microsoft Intune
Device enrolment, configuration profiles, compliance policies and application management from a central console.
Windows Autopilot
Standardised Windows provisioning, so a new device can be shipped direct to a user and configure itself on first sign-in.
Mobile device management
Administration of supported iOS, iPadOS and Android devices, including corporate-owned and approved personal devices.
macOS management
Enrolment, configuration policies and compliance for supported Apple Mac devices.
Endpoint security
Disk encryption, security policies, compliance reporting and integration with Microsoft Defender.
Application management
Software deployment, controlled updates and application configuration without manual installs.
Device lifecycle
Preparation, onboarding, replacement, reassignment and secure retirement or wiping of devices.
Access integration
Device compliance signals used by Entra Conditional Access, where supported, so only compliant devices reach company data.
Outcomes
Customer outcomes
Consistent configuration
Every device built to the same standard.
Faster onboarding
Standardised provisioning for new starters.
Better visibility
A current view of devices, owners and compliance.
Less manual admin
Policies and apps deployed centrally.
Remote and hybrid ready
Devices managed wherever people work.
Enforced security policy
Non-compliant devices identified and restricted.
Delivery
How we implement endpoint management
- Step 01
Assess
Inventory devices, licences and current management tools.
- Step 02
Design
Agree baseline policies, apps and enrolment methods per device type.
- Step 03
Pilot
Test with a small group before wider rollout.
- Step 04
Roll out and manage
Enrol remaining devices, then manage under an ongoing package.
Pricing
Pricing
Ongoing endpoint management is part of the Modern Workplace package within the approved scope. Initial implementation, remediation of existing devices or standalone project work is quoted separately.
- • Intune requires appropriate Microsoft licensing, charged separately.
- • Implementation and remediation projects are quoted separately.
FAQs
Endpoint Management questions
What is endpoint management?
Endpoint management is the practice of centrally configuring, securing, updating and monitoring the devices people use for work — laptops, desktops, phones and tablets — rather than managing each one by hand.
What is the difference between MDM and Intune?
MDM (mobile device management) is the general category of tools for managing devices. Microsoft Intune is Microsoft's cloud-based endpoint management service; it includes MDM along with application management, compliance and integration with Microsoft 365 and Entra ID.
Can K2CT manage Windows and Apple devices?
Yes. Intune supports Windows, macOS, iOS, iPadOS and Android. Some capabilities differ by platform, and we confirm what is supported for your devices during assessment.
What is Windows Autopilot?
Windows Autopilot is a Microsoft service that registers new Windows devices to your organisation, so when a user signs in for the first time the device applies your settings and installs your apps automatically.
Do we need Intune licences?
Yes. Intune is included in licences such as Microsoft 365 Business Premium and certain Enterprise plans, or can be licensed separately. We review your current licences and recommend the most cost-effective option.
Can staff use personal devices?
Yes, with the right controls. App protection policies can secure company data within apps on personal phones without taking control of the whole device, keeping personal and work information separate.
How does endpoint compliance improve security?
Compliance policies check things like encryption, operating system version and security settings. Combined with Conditional Access, devices that don't meet the standard can be blocked from company data until they are fixed.
Related services
Services that work alongside this one
Microsoft 365
Managed email, collaboration, identity, licensing and workplace technology.
Learn moreManaged IT & Helpdesk
Reliable support, proactive management and day-to-day technology operations.
Learn moreCybersecurity
Identity protection, endpoint security, threat monitoring and security governance.
Learn moreIT Projects & Migrations
Technology deployments, migrations, upgrades and infrastructure transformations.
Learn moreMake every device a managed, secure device.
Tell us how many devices you have and how they are set up today. We'll outline a practical path to consistent management.