Michael Jochum

Planning, setup, and operation of a highly available Azure-based virtual desktop and identity infrastructure for a healthcare provider with continuous 24/7 operation across multiple locations.

The project's goal was to provide a stable, centrally managed work environment for administrative and specialized applications that meets the specific requirements of a critical care facility.

For this purpose, an Azure Virtual Desktop environment was implemented, supplemented by an Azure-based Active Directory infrastructure with two virtual domain controllers to ensure availability, redundancy, and operational security. A central application server was deployed in Azure and integrated into the virtual desktop environment.

User profile management is handled by FSLogix with Azure Files as central storage to ensure consistent user experiences, fast session logins, and easy scalability.

The project is being implemented in close cooperation with the internal IT department and is in ongoing operation, including support, optimization, and technical further development.

Architecture & Design of the Azure Infrastructure

Setup of the AVD environment for productive 24/7 use

Implementation of a highly available Active Directory structure in Azure

Concept and implementation of profile management with FSLogix & Azure Files

Coordination with internal IT, technical consulting & operational support

Ongoing optimization and stabilization of the environment

Central, reliable work environment for multiple locations

High availability for time-critical care and administrative processes

Uniform user profiles across all workstations

Reduced complexity and improved maintainability

Stable foundation for operation and future expansions

Concept and implementation of an Azure Virtual Desktop environment with GPU support to provide powerful CAD workstations for location-independent work.

The project's goal was to provide AutoCAD and Revit workstations securely and performantly in home offices as well as on construction sites – regardless of the local performance of the end devices used.

For this purpose, a GPU-based AVD architecture was designed and implemented in Microsoft Azure, which executes computationally intensive CAD applications centrally and allows access via lean client devices.

Secure authentication and access control

Prevention of local data transfer to client devices

Protection of sensitive project and planning data during mobile use

Architecture & Design of a GPU-powered AVD environment

Selection and configuration of suitable Azure VM types

Implementation of secure identity and access mechanisms

Configuration of policies for data exfiltration prevention

Technical implementation, testing, and optimization of the environment

Transition to operation, optimization, and technical support

Performant CAD workstations with GPU acceleration

Location-independent work on construction sites and in home offices

Central data storage without data leakage to end devices

Increased security and control with high user acceptance

Holistic modernization of an existing IT infrastructure with the goal of creating a stable, scalable, and future-proof work environment.

As part of the project, existing server, network, and client infrastructure were replaced, and the network architecture was redesigned, including firewall, switching, and WLAN infrastructure. To consolidate the server landscape, a virtualization environment based on Windows Server and Hyper-V was established and supplemented with a virtual desktop solution for remote workstations.

Concurrently, Microsoft 365 was introduced, including hybrid identity management through synchronization of the local Active Directory structure with Microsoft Entra ID. End devices were managed and deployed via Microsoft Endpoint Manager (Intune), including software distribution and device integration.

Additionally, a central backup concept for server and data assets was implemented, and a VoIP telephony solution, including mobile and desktop clients, was introduced and integrated into the existing IT landscape.

Overall technical architecture & planning of the target environment

Design and implementation of the server, network, and virtualization architecture

Introduction of Microsoft 365 including hybrid identity concept

Implementation of endpoint and device management with Intune

Integration of backup and communication solutions

Transition to operation, optimization, and technical support

Unified and clearly structured IT architecture

Improvement of stability, security, and maintainability

Enabling modern remote work models

Reduction of technical dependencies and complexity

Sustainable operability through standardized cloud and endpoint concepts