Forty-five minutes, and a verdict you can circulate.
We look at your Active Directory, your remote access and your branch links, and tell you which of three answers fits: keep the VPN, move to Entra, or run the overlay.
No deck, no product tour, no obligation. Roughly a third of the time the verdict is that you should not buy from us.
How the forty-five minutes are spent.
What you run today
10 min
Your remote access stack, how many sites it serves, and which parts of it you would keep given a free choice. We also ask what has broken recently, because that is usually the honest requirements document.
The directory itself
15 min
Sites and subnets, Domain Controller placement, replication topology, whether a branch has a local Domain Controller, and where Group Policy is actually applying rather than where you believe it is.
What is currently exposed
10 min
Published RDP, jump hosts in a DMZ, port forwards that outlived the project that needed them, and anything else with a public listener. This part frequently finds something nobody on the call knew about.
Where identity lives
5 min
Directory sync, hybrid join state, your Microsoft 365 tier and whatever MFA product is bolted on. The tier matters because it decides whether Entra is a new line item or already paid for.
The verdict
5 min
We tell you which of the three answers fits and why. Then you get it in writing on one page within two working days.
What you leave with.
One page, within two working days. Here is what one looks like.
What we look at.
The current remote access concentrator, client and licensing model.
Sites, subnets and Domain Controller placement.
Domain Controller exposure and any published services.
Remote logon failures and pre-logon domain reachability.
Group Policy drift between head office and remote machines.
Published RDP, jump hosts and surviving port forwards.
The identity stack
directory sync, hybrid join state, MFA product.
Your Microsoft 365 tier, because it changes the cost maths entirely.
Who this is for.
If three of these are not true, the review will waste your time and we will say so when you book it.
You run Active Directory on your own servers in production.
Remote or multi-site users need domain resources, not just email.
You use a VPN today, or something is exposed to the internet for remote access.
You can make or influence the decision in IT or security.
You would run a pilot on real endpoints if the review checks out.
Before you book it.
01Is this a sales demo with a different name
No. There is no product tour and no deck. We look at your environment and give you a verdict, and roughly a third of the time that verdict is that your current setup is fine or that Entra genuinely is the better fit. A review that always said buy ControlIT would be worth nothing to you and nothing to us.
02Who should be on the call
Whoever actually knows the directory and the firewall. That is usually one administrator plus the IT head. Forty-five minutes with the person who runs it beats two hours with people relaying answers.
03Do we need to give you access to anything
No. This is a conversation plus whatever you choose to show on a screen share. We do not ask for credentials, we do not install anything, and we do not need a connection into your network to run it.
04What do we actually receive
One page, within two working days. It states what you run now, what is exposed, the three options with the honest trade-offs of each, and our recommendation with the reasoning shown. It is yours to circulate whether or not you ever talk to us again.
05We have no on-premises directory. Is this useful
Honestly, no. If there is no on-premises directory, the problem this review is built around does not exist for you. We will say so rather than take the meeting.
Book the forty-five minutes.
Bring the person who runs the directory and the person who runs the firewall. You will have a written verdict within two working days.