Skip to content
Elevelay

Secure Managed Desktops Pack

Give contractors and staff on personal devices a secure, managed desktop inside your own tenant - Azure Virtual Desktop or a Windows 365 Cloud PC.

Scope your managed desktops

A short call to scope the users, images, and access controls in scope. No obligation.

The problem

Whether you bring in contractors, run a hybrid or remote team, or let employees work from their own devices, your data usually ends up on machines you do not control - personal laptops, unmanaged and unpatched, outside Conditional Access and outside your Cyber Essentials scope. That is the device-compliance gap that fails a Cyber Essentials assessment and a cyber-insurance questionnaire, and the quiet path a breach takes in. The fix is to stop sending data to the device and bring the desktop to the data: a managed Azure Virtual Desktop or Windows 365 Cloud PC that lives in your own Microsoft Azure tenant, where identity, device compliance, and access controls already apply - so anyone works inside your governed environment from any device, and nothing sensitive is left behind when a contractor rolls off, an employee leaves, or a personal laptop is lost.

What's Included

  • Azure Virtual Desktop (AVD) or Windows 365 Cloud PC deployed into your own Microsoft Azure tenant, defined as infrastructure-as-code (Terraform)
  • Microsoft Entra identity, Conditional Access, and device compliance applied so only the managed desktop reaches your data - not the user's own laptop
  • Microsoft Intune management, a hardened desktop image, and Microsoft Defender on the desktop
  • Session controls - clipboard, drive, and download redirection restricted where required - so data cannot leave the governed environment
  • Fast provisioning and clean de-provisioning, so a new joiner or contractor is productive on day one and fully cut off the day they leave
  • The image, policies, and Terraform handed over, so you can spin up new desktops repeatably

What This Assumes

  • An agreed number of users and desktop images, and the application list for each image
  • A Microsoft Azure subscription with budget for the desktops to run in, and eligible Windows or Microsoft 365 licensing for Azure Virtual Desktop, or Windows 365 Cloud PC subscriptions
  • Administrative access to your Microsoft Azure tenant

Not Included

  • The ongoing Azure consumption (Azure Virtual Desktop) or per-user Cloud PC subscription cost - the fixed price is the build, not the monthly run cost
  • Application packaging beyond the agreed image, and non-Windows workloads
  • End-user helpdesk and support

Outcomes

  • Contractors and employees working inside a governed environment, from any device, with nothing sensitive left on the endpoint
  • The device-compliance control Cyber Essentials and cyber-insurance ask for, satisfied for your remote, hybrid, and outsourced workforce
  • Access that ends cleanly when a contract or role does - no data left behind on a personal laptop
  • A repeatable desktop you can provision in minutes, not a per-user rebuild

Who It's For

  • Teams whose contractors or BYOD employees would otherwise work from their own unmanaged laptops
  • Organisations enabling a remote or hybrid workforce without shipping and managing a physical device for everyone
  • Finance, insurance, and regulated teams that need every device touching their data managed and compliant for Cyber Essentials or a cyber-insurance renewal

How to Start

Most engagements begin with the free audit and go no further until you have seen where you stand.

The Managed Desktop Deployment

from £9,000 / $11,500

A fixed-scope deployment of managed Azure Virtual Desktop or Windows 365 Cloud PC into your own tenant, with identity, compliance, and session controls in place.

  • AVD or Windows 365 Cloud PC built into your Microsoft Azure tenant, defined as Terraform
  • Conditional Access, Intune compliance, and a hardened image, so only the managed desktop reaches your data
  • Fast provisioning and clean de-provisioning for contractors and employees

Guarantee: every in-scope user on a secure, compliant, managed desktop by the agreed date, or we keep working free.

Managed Desktop Retainer

from £3,500 / $4,500

An optional retainer that keeps the images patched and hardened and scales the desktops up and down as your workforce changes.

  • A fixed amount of expert time each month on image maintenance and access policy
  • Desktops scaled up and down as contractors and employees come and go
  • A forward plan reprioritised every month

Engagement Model

A fixed-scope deployment with a defined start and end: the managed desktop environment is the deliverable, agreed as a written spec and priced by the number of users and images in scope before work starts. A fixed price, no day rates. And it is guaranteed: every in-scope user on a secure, compliant, managed desktop by the agreed date, or we keep working at no extra charge until they are. And it graduates into Continuous Evidence, so the desktop images stay patched and hardened and the evidence stays current inside the retainer as your workforce changes.

Pricing: from £9,000 / $11,500 - larger engagements are tailored to scope.

Scope your managed desktops

We govern the AI we deliver with

This work is delivered AI-accelerated, so AI tooling reads configuration data from your estate along the way. It is fair to ask how that is governed - and the answer is published: which providers we use and on what commercial terms, what client data never reaches a model, that a named architect signs off every output, and that AI tooling holds no standing write access to client systems.

Read our AI policy

Related

Get started

Find out where you stand, free

Most engagements start with a no-cost posture audit against the baselines that matter to you. If a fixed-fee roadmap is the right next step, we'll say so - and if it isn't, we'll say that too.

Start a conversationExplore services