Capacity Creation
Capacity Creation is our co-managed IT service. Your team keeps ownership and control. We add senior engineers, specialist Apple and Microsoft skills and extra capacity when you need it.
What your team gets
Trusted by teams across UK government, healthcare, education, charities, financial services and global brands
98%
Update compliance within four weeks, up from 65%, across around 1,000 Macs
250 Macs
Back on the target version within 7 days of a failed macOS update
7 days
Notice given to staff before an update is forced
Source: our case study for a global trading company, which manages its Macs with Jamf.
Good IT teams still hit the same limits: too much work, too few specialists and nobody to cover.
Scenario 1
A Jamf policy, an Intune compliance rule or a conditional access setting is misbehaving, and it has been open for days.
What you can doEscalate it to our senior engineers for third-line fixes and root-cause analysis, and get a second opinion before the next change.
Scenario 2
The business has bought Macs, and the team that knows Windows and Intune now has to support them too.
What you can doWe design and manage your Jamf set-up, and train your team to handle everyday Mac requests with confidence.
Scenario 3
A move to Jamf or Intune, a tenant migration or a device refresh has to happen while the tickets keep coming in.
What you can doBring us in for project delivery alongside your day-to-day work, with design and delivery agreed with your team.
Scenario 4
One person holds the Jamf or Intune knowledge, and when they are away or leave, so does the knowledge.
What you can doRetained cover for holidays, sickness and peaks, with runbooks and documentation so knowledge stays in the team.
We work with your team, tools and processes. We do not replace what already works.
Senior engineers for your hardest problems: complex Jamf, Intune and Entra ID problems, root-cause analysis and permanent fixes, incident support and recovery, and a second opinion on changes.
Enterprise Apple skills most teams lack: Jamf Pro architecture and policies, smart groups and extension attributes, Jamf Connect, Platform SSO and Jamf Protect, and macOS update enforcement with Declarative Device Management (DDM). If you want Jamf run for you, see Jamf managed services.
Identity and device management done right: Intune policies, compliance and apps, Windows Autopilot and device resets, conditional access and Entra ID, and Defender and Purview configuration.
Projects delivered alongside your day-to-day work: mobile device management (MDM) migrations to Jamf or Intune, Microsoft 365 and tenant migrations, device refreshes and rollouts, and security and compliance programmes. See projects and transformation.
Less repetitive work for your team: scripting in Bash, zsh and PowerShell, the Jamf Pro API and Microsoft Graph, automated starter and leaver tasks, and reporting your team can rely on.
Your service continues, and your team builds its skills: holiday, sickness and peak cover, runbooks and documentation, shadowing and training sessions, and handover when a team member leaves.
Every engagement is agreed up front. This is a typical starting point, and we adjust it to your team.
| Area | Your IT team | Postremo IT |
|---|---|---|
| First-line support | Day-to-day requests from your people | Overflow and, by arrangement, out-of-hours cover |
| Escalations | Triage and hand-off | Third-line fixes and root-cause analysis |
| Apple and Jamf | Everyday administration | Jamf Pro, Connect and Protect design, fixes and upgrades |
| Microsoft 365, Entra ID and Intune | User and licence administration | Policies, conditional access, Autopilot and security baselines |
| Projects | Priorities and business sign-off | Design and delivery alongside day-to-day work |
| Documentation | Shared ownership | Runbooks and knowledge transfer as we go |
What changes when your team has senior engineers and specialist skills to call on.
| Area | Team on its own | With Capacity Creation |
|---|---|---|
| Hard problems | Team on its ownResearched between other work, and open for days. | With Capacity CreationEscalated to senior engineers for third-line fixes and root-cause analysis. |
| Specialist skills | Team on its ownHired, or learned on the job while things wait. | With Capacity CreationJamf, Intune and Entra ID specialists, when you need them. |
| Projects | Team on its ownSqueezed around the ticket queue. | With Capacity CreationDelivered alongside your day-to-day work. |
| Cover | Team on its ownHolidays and sickness leave gaps. | With Capacity CreationHoliday, sickness and peak cover, agreed in advance. |
| Knowledge | Team on its ownLeaves when a team member leaves. | With Capacity CreationRunbooks, documentation and training, kept by your team. |
We use your tools, follow your change process and report on every hour we work.
Agree the gaps
A call with your IT lead to agree the gaps, priorities and how much capacity you need.
Book a callLeast access
Our engineers get named accounts, with only the access they need, to your tools, ticketing and documentation.
One queue
A shared queue, a regular check-in and escalation paths everyone understands.
Monthly
Monthly reporting on time used, tickets resolved and improvements made.
Your in-house team knows your organisation best. Capacity Creation gives them senior support and specialist skills when they need them, without the cost and delay of hiring.
You choose how to use us. Some teams take a monthly block of engineering hours, some bring us in for a fixed-scope project, and some keep us on retained cover for their helpdesk.
Not sure whether you need co-managed or fully managed IT? Our guide to co-managed versus fully managed IT sets out the differences, and managed IT services explains the fully managed option.
Small IT teams supporting growing organisations, and IT managers who want a trusted second opinion before a big change.
Teams that know Windows and Intune well and now need to support Macs, iPhones and iPads to the same standard. See Mac IT support.
Teams facing a migration, a device refresh or a security programme on top of their day-to-day work.
Can’t see your question? Call us on +44 20 7550 9103 or book a call.
Co-managed IT means your in-house team and an external provider share the work. Your team keeps ownership and day-to-day control, while the provider adds senior escalation, specialist skills and extra capacity. Capacity Creation is our co-managed IT service for Apple and Microsoft environments.
Outsourcing hands your IT to a provider. Capacity Creation strengthens the team you already have: we work inside your tools and processes, follow your change process, and transfer knowledge as we go, so your team ends up more capable rather than more dependent.
Capacity Creation can be a monthly block of engineering time, a fixed-scope project or retained cover. We agree what fits your workload on a call with your IT lead, and report every month on the time used, tickets resolved and improvements made.
Yes. We work within your ticketing, documentation and change processes wherever possible. Our engineers get named accounts with only the access they need, so your audit trail shows exactly who did what, and your team keeps one queue.
Yes. This is one of the most common reasons teams work with us. We design and manage your Jamf set-up, and train your team to handle everyday Mac requests with confidence, with our specialists on hand for the harder problems.
Yes. A fixed-scope project, such as a Jamf rebuild, a move to Intune or a Microsoft 365 tenant migration, is one of the three ways to work with us. We agree the scope and outcome with your team before we start.
Tell us what you want your IT to do next. We’ll ask about your people, devices and plans, and tell you honestly whether we’re the right fit.
London head office
Postremo IT Limited
Level 24, One Canada Square
Canary Wharf
London E14 5AB
+44 20 7550 9103
info@postremoit.com
Also in Dubai
Business Bay, Dubai
Your brief: