A reference workstation, ready to duplicate
If your organisation has an in-house IT team, you do not need someone to deploy your workstations for you: you need a reliable reference image that your team can roll out across the estate itself. That is exactly what this service covers, without touching your production devices.
Design of a Windows 11 master image: operating system, drivers, standard applications, settings.
Integration of Windows updates and baseline security settings.
Optional advanced hardening: application of a recognised security baseline.
Deployment tests on validation machines (never on your production estate), covering the applications and use cases agreed at the start.
Full documentation: image contents, deployment procedure, and an image update procedure with recommended steps and points to watch.
Who is it for?
Organisations with an in-house IT team that wants to save time on workstation deployment.
Organisations that renew or standardise their estate regularly.
Organisations that prefer to keep control of the final deployment while delegating the design of the image.
What the base price includes
The starting price shown above covers one master image (one standard workstation profile) with baseline security settings. Two options are quoted on top:
An additional variant, for example a management workstation with specific software.
Advanced hardening: a security baseline with unnecessary services disabled, obsolete protocols switched off, and reinforced BitLocker and Defender policies.
How it works
Preparation: gathering the target profile (applications, settings, security constraints).
Build: construction of the master image (OS, drivers, applications, configuration, Sysprep).
Tests: validation deployment on test machines, never on your production estate.
Documentation: image contents, deployment and update procedures.
Handover: delivery of the image and documentation to your IT team, with a Q&A session and 14 days of post-delivery support.
The image is built remotely, in a virtualised environment or on a validation machine that you make available. It is delivered through a secure file exchange, and the handover session takes place by video call.
Deliverables
A Windows master image tested on validation machines and ready for use within the planned scope.
Documentation of the image contents (applications, drivers, settings).
A deployment procedure for your IT team.
An image update procedure, with recommended steps and points to watch (annual Windows feature updates, new drivers).
14 days of post-delivery support for questions about the delivered image and its documentation.
Further reading
Frequently asked questions
How is this different from the Windows 11 migration service? The Windows 11 migration includes full deployment on your existing estate, device by device. This service delivers only the master image: your IT team then handles deployment at its own pace.
Is the image tested on my production estate? No. All tests run on dedicated validation machines. Your production estate is never touched as part of this service.
What if I prefer Windows Autopilot and Intune to a classic image? That is often the best option for a cloud-managed estate: see our Microsoft 365 and Intune service. A classic master image remains relevant if you manage your estate without depending on the cloud, or for fast volume deployments on identical hardware.
What does the advanced hardening option involve? Beyond the baseline security settings included as standard, hardening applies a recognised baseline (obsolete protocols such as SMBv1 disabled, unnecessary Windows services switched off, reinforced BitLocker and Windows Defender policies). Each setting is tested on the validation machines to make sure it does not break the applications and use cases agreed at the start; where a real incompatibility appears, the exception is documented rather than forced. Hardening reduces certain configuration risks but does not replace a full security audit, monitoring or an overall security policy.
Do you maintain the image over time? Not by default: the image comes with its update procedure so your team is self-sufficient. A one-off update can be ordered separately, on quote, for a new annual Windows release, a hardware change needing new drivers, or a move to a new generation of the operating system.
What does the 14-day support cover? Questions about the delivered image and its documentation. It does not cover deployment across the full estate, ongoing maintenance of the image, user support, compatibility with hardware or applications outside the agreed scope, security monitoring, or any guarantee against vulnerabilities.