Serverless Modern Workplace Transformation
Creating a secure, standardised and cloud-managed digital foundation for a growing multi-academy trust
Executive Summary
Education Partnership Trust (EPT) engaged Novus Networks to deliver a Trust-wide modern workplace transformation that would standardise its device estate, strengthen cyber security and improve digital consistency across its schools. As the Trust continued to grow, its existing mix of operating systems, legacy configurations and varied security controls created operational challenges and increased risk exposure.
Novus designed and implemented a phased programme to introduce a cloud-managed Windows 11 environment supported by Microsoft Intune, Windows Autopilot, Microsoft Defender and a structured SharePoint Online architecture. All in-scope devices were re-imaged to a standard build, identity and access controls were modernised, and advanced endpoint protection was deployed across participating schools.
To enhance visibility and operational control, Novus RMM was implemented to provide the Trust with real-time monitoring, proactive alerting, remote access capabilities and automated software and patch deployment. Data resilience was strengthened through the rollout of Barracuda Cloud-to-Cloud Backup and Entra ID backup for all users.
The result is a secure, scalable and cloud-aligned digital platform that reduces operational overhead, improves the user experience, and provides a consistent framework for future growth. With Novus’s ongoing managed service, the Trust benefits from continuous monitoring, optimisation and assurance as additional schools are onboarded.
Customer Background
As EPT grew, it inherited a fragmented device estate across its academies. Schools operated with varied Windows versions, inconsistent build standards and differing levels of security maturity. Device provisioning still required manual imaging, consuming valuable capacity during peak periods such as summer rollout and new staff onboarding.
In parallel, security controls were uneven. Visibility into threats, endpoint protection, and policy enforcement varied across schools, exposing the Trust to elevated cyber risk. Collaboration was restricted by legacy file structures that were not designed for cross-site working or remote access. The Trust needed a unified, cloud-first approach to device management, identity, security and data governance, one that reduced operational burden while strengthening consistency and control.
The Challenge
Like many education trusts, the organisation faced increasing pressure from:
Maintaining legacy systems was becoming costly, difficult to secure, and misaligned with modern safeguarding and compliance expectations. The Trust needed a secure, serverless alternative that reduced operational overhead while strengthening control and visibility.
Why Novus
EPT selected Novus based on specialist expertise in the UK education sector and a proven ability to modernise ICT environments across multi-academy trusts. The Trust required a partner capable of designing a scalable architecture, delivering it across multiple sites with minimal disruption, and embedding security-by-design principles aligned with Microsoft best practices.
Novus provided end-to-end capability, from discovery and build creation through to migration, training and managed service transition. This ensured EPT received a cohesive, future-ready solution delivered with assurance, transparency and partnership.
The Solution Delivered
Novus delivered a phased modern workplace transformation, beginning with approximately half of the Trust’s schools and extending to the remainder over the summer period. This approach allowed EPT to adopt a consistent standard early, refine it with real user feedback and accelerate rollout across additional sites. A standardised Windows 11 build was implemented across all in-scope devices, replacing legacy configurations and establishing a uniform platform for performance, security and management.
Devices were enrolled into Microsoft Intune, giving EPT a single cloud-managed platform for configuration, updates, application lifecycle management and compliance. Windows Autopilot removed manual imaging entirely, providing zero-touch provisioning and enabling devices to be deployed or rebuilt simply by powering them on. To strengthen day-to-day oversight, Novus deployed Novus RMM, providing real-time monitoring, custom dashboards, proactive alerting, hardware lifecycle insights, and secure remote access across all sites. This allowed issues to be identified early, resolved quickly and managed consistently, while enabling automated patching and the centralised deployment of software and scripts.
Security resilience was significantly enhanced through the adoption of Microsoft Defender for Endpoint, Defender for Cloud Apps, MFA, and Conditional Access, delivering Trust-wide visibility, threat detection and identity protection. EPT’s data resilience strategy was further strengthened by onboarding all users to Barracuda Cloud-to-Cloud Backup and implementing Entra ID Backup, ensuring the security and recoverability of both data and identity assets.
Structured SharePoint Online landing zones were created to modernise collaboration and standardise data governance. User and shared data were migrated into Microsoft 365 to ensure secure, reliable access from any site. Novus provided training to IT teams and key users, offered on-site support during go-live and transition, and transitioned the environment to our managed service for proactive monitoring, optimisation, and ongoing assurance.
Outcomes and Benefits
EPT now operates a secure, cloud-managed environment that is significantly easier to govern and maintain. Device deployment has shifted from a multi-day manual process to rapid, automated provisioning, releasing substantial IT capacity. Standardisation on Windows 11 has improved performance and user experience across schools.
Security posture has strengthened materially. Unified visibility through Defender, MFA and Conditional Access has reduced risk while maintaining ease of access for staff. Centralised monitoring and alerting via Novus RMM has improved responsiveness and reduced operational overhead.
SharePoint Online has simplified collaboration, enabling staff to work seamlessly across sites with clear governance and improved remote access. The overall architecture provides a repeatable blueprint for onboarding new schools as EPT grows.
Customer Feedback
“Novus have helped us re-imagine our device estate across the Trust with minimal disruption to schools. We now have a consistent, secure platform and a much more streamlined way to deploy and manage devices. It’s given our team the headroom to focus on supporting teaching and learning, rather than constantly firefighting IT issues“
Talha Mulla, Head of IT, Education Partnership Trust
Conclusion
The partnership between EPT and Novus has delivered a modern, cloud-first digital environment that strengthens cyber resilience, simplifies device management and supports the Trust’s long-term operational strategy. Through standardisation on Windows 11, Intune, Autopilot, Defender Suite, and SharePoint Online, supported by Novus RMM and resilient backup, the Trust now benefits from a secure, scalable, and future-ready platform.
Novus continues to provide ongoing managed service support, ensuring consistency, assurance and continuous improvement as the Trust evolves.
