45 minutes · no cost · no deck
AD-over-Internet Readiness Review
Forty-five minutes with an engineer who has moved Active Directory off VPNs before. At the end you get one page telling you whether to keep the VPN, move to Entra, or move to an encrypted overlay — including when the answer is not us.
Goes to the Computer Port contact form. Mention your site count and we will put the right engineer on the call.
What the 45 minutes covers
Five blocks. We keep to them, because a review that runs long is a review nobody books a second time.
What you run today
10 minYour VPN or remote-access stack, how many sites it serves, and which parts of it you would keep if you had a free choice. We also ask what has broken recently, because that is usually the honest requirements document.
The directory itself
15 minAD sites and subnets, domain controller placement, replication topology, whether a branch has a local DC or an RODC, and where Group Policy is actually applying versus where you believe it is.
What is currently exposed
10 minPublished RDP, jump hosts in a DMZ, port forwards that outlived the project that needed them, and anything else with a public listener. This part frequently finds something nobody on the call knew about.
Where identity lives
5 minAzure AD Connect, hybrid join state, your M365 licence tier, whatever MFA product is bolted on, and what your auditors have asked for. Your M365 tier matters because it decides whether Entra is a new line item or already paid for.
The verdict
5 minWe tell you which of the three answers fits: keep the VPN, go to Entra, or move to an overlay. Then you get it in writing on one page within two working days.
What we inspect
Nothing here needs access to your network. It is a structured conversation plus whatever you choose to put on screen.
- Current VPN concentrator, client, and licensing model
- AD sites, subnets, and domain controller placement
- Domain controller exposure and any published services
- Remote logon failures and pre-logon domain reachability
- Group Policy drift between head office and remote machines
- Published RDP, jump hosts, and surviving port forwards
- Identity stack: Azure AD Connect, hybrid join, MFA product
- M365 licence tier, because it changes the cost maths entirely
Whether this is worth your time
Five questions. Three or more yes and the review will tell you something you did not already know. Fewer than three and we will say so before booking, rather than after.
- You run on-prem Active Directory in production.
- You have remote or multi-site users who need domain resources.
- You use a VPN today, or something is exposed to the internet for remote access.
- You can make or influence the decision in IT or security.
- You would be willing to run a 14-day pilot on real endpoints if the review checks out.
Questions we get asked before booking
Is this a sales demo with a different name?
No. There is no product tour and no deck. We look at your environment and give you a verdict, and roughly a third of the time that verdict is that your current setup is fine or that Entra genuinely is the better fit for you. A review that always says "buy ControlIT" would be worth nothing to you and nothing to us.
Who should be on the call?
Whoever actually knows the AD and the firewall. That is usually one AD or network administrator plus the IT head. Forty-five minutes with the person who runs it beats two hours with people relaying answers.
Do we need to give you access to anything?
No. This is a conversation plus whatever you choose to show on a screen share. We do not ask for credentials, we do not install anything, and we do not need a connection into your network to run the review.
What do we actually receive?
One page, within two working days. It states what you run now, what is exposed, the three options with the honest trade-offs of each, and our recommendation with the reasoning shown. It is yours to circulate internally whether or not you ever talk to us again.
What does it cost?
Nothing. It is 45 minutes of an engineer’s time, and it qualifies us as much as it qualifies you — a site we should not sell to is a site we would rather find out about now.
We are a cloud-native shop with no on-prem AD. Is this useful?
Honestly, no. If there is no on-prem directory, the problem this review is built around does not exist for you. We will say so rather than take the meeting.
Book the review
Tell us how many sites you run and what your remote-access setup looks like today. We will come back with a time and the name of the engineer who will take the call.