Windows IT support
PCs set up by hand, updates left to chance and machines still on Windows 10 cost your team time and leave gaps an attacker can use. We manage your Windows 11 PCs from the cloud with Microsoft Intune and Autopilot, so every device is set up the same way, patched on schedule and protected.
The Windows estate review
Trusted by teams across UK government, healthcare, education, charities, financial services and global brands
3 years
The most Windows 10 Extended Security Updates an organisation can buy after support ended
24 months
Support for each Windows 11 Pro feature update
36 months
Support for each Windows 11 Enterprise and Education feature update
300 users
The limit for Microsoft Defender for Business, included in Business Premium
Sources: Microsoft Learn, Windows 10 ESU, Windows 11 release information and Defender for Business. Checked November 2026.
Most problems are not dramatic. They are PCs that slipped out of support, were set up by hand or were never encrypted.
Scenario 1
Windows 10 support ended on 14 October 2025. Without Extended Security Updates, those PCs get no more security fixes.
What you can doWe check which PCs meet the Windows 11 requirements (TPM 2.0, Secure Boot and a supported processor), upgrade them through Intune and plan replacements for the rest. Extended Security Updates can cover the gap, but only as a short bridge.
Scenario 2
Windows 11 Pro devices still on version 24H2 stopped getting updates on 13 October 2026. Being on Windows 11 is not enough on its own.
What you can doWe move devices to a supported version in stages with Intune and Windows Autopatch, so a bad update reaches a test group first and can be paused.
Scenario 3
Setting up each PC by hand takes engineer time, and no two end up quite the same.
What you can doWith Windows Autopilot the laptop can go straight to the person. They sign in with their work account, and their apps and settings arrive. When someone leaves, Autopilot Reset gets the device ready for the next person.
Scenario 4
A lost PC is a data problem if the disk is not encrypted or the password is weak.
What you can doWe switch on BitLocker with the recovery keys saved to Microsoft Entra ID, set up Windows Hello for Business sign-in and protect every device with Microsoft Defender for Business.
What changes when your Windows PCs are managed from the cloud instead of one at a time.
| Area | PCs managed by hand | Managed by Postremo with Intune |
|---|---|---|
| New PCs | WithoutEach laptop is unboxed, imaged and set up by hand. | WithWindows Autopilot uses the Windows already installed by the manufacturer. The user signs in and Intune applies the rest. |
| Updates | WithoutUpdates install when users allow them, and nobody knows who is behind. | WithWindows, Microsoft 365 Apps, Edge and Teams updates go out in rings through Windows Autopatch, with reports on who is up to date. |
| Windows version | WithoutA mix of Windows 10 and older Windows 11 versions. | WithEvery PC on a supported Windows 11 version, with a date for the next feature update. |
| Sign-in | WithoutPasswords, sometimes shared or reused. | WithWindows Hello for Business: a PIN, face or fingerprint tied to that device, which meets the Microsoft Entra multifactor authentication requirement. |
| Lost or stolen PCs | WithoutNo proof the disk was encrypted. | WithBitLocker on every PC, recovery keys in Microsoft Entra ID and an encryption report you can show an auditor. |
| Threats | WithoutBasic antivirus, with nobody watching the alerts. | WithMicrosoft Defender for Business with endpoint detection and response, and an engineer who acts on what it finds. |
Four steps. It starts with a review of the PCs you have, and you decide how far to go.
Windows estate review
We look at every Windows PC: version, hardware, encryption, updates, security tools and how it is managed today. We list which PCs can move to Windows 11 and which need replacing.
Book a Windows estate reviewAgree the target set-up
We agree the standard every PC should meet: Intune policies, update rings, sign-in, encryption and Defender settings, and the licences you need. As a UK Microsoft Cloud Solution Provider we can supply them.
Set up Intune and Autopilot
We build the policies in your Microsoft tenant, test them on a pilot group, then enrol and upgrade the rest in stages so people can keep working.
Ongoing Windows support
Our helpdesk supports your people remotely across the UK, and on site in London. We watch updates, compliance and Defender alerts, and review the estate with you regularly.
Businesses in London and across the UK that run on Windows PCs and Microsoft 365, and want one team to look after them. See managed IT support.
As a Jamf Professional Partner we run Macs with Jamf and PCs with Intune, under one helpdesk and one set of policies. See our Mac IT support.
Financial services, legal and government suppliers that need evidence of encryption, updates and sign-in. Pair it with Cyber Essentials.
Not sure what you have? The review answers that first.
Our whole team works from Level 24, One Canada Square in Canary Wharf, Monday to Friday, 9am to 6pm. Most Windows problems are fixed remotely. When something needs hands on, we come to you in London.
Windows support sits within our wider Microsoft services: Microsoft 365, Entra ID, Intune and licensing.
Can’t see your question? Call us on +44 20 7550 9103 or book a call.
A helpdesk for your people, plus management of every Windows PC with Microsoft Intune: set-up with Windows Autopilot, updates through Windows Autopatch, BitLocker encryption, Windows Hello for Business sign-in and Microsoft Defender for Business. We support you remotely across the UK and on site in London.
Windows 10 PCs still work, but support ended on 14 October 2025, so they get no security updates unless you pay for Extended Security Updates. Organisations can buy these by the year for up to three years, and only for version 22H2. We recommend moving to Windows 11.
Windows 11 needs a supported 64-bit processor, 4 GB of memory, 64 GB of storage, Secure Boot and TPM 2.0. Our Windows estate review checks every PC and tells you which can upgrade and which need replacing.
A version that is still supported. Each Windows 11 Pro version gets 24 months of updates and Enterprise gets 36. Windows 11 Pro version 24H2 stopped getting updates on 13 October 2026, so Pro devices need version 25H2 or later.
Yes. We are a Jamf Professional Partner and manage Macs with Jamf alongside Windows PCs in Intune, under one helpdesk. See our Mac IT support page.
Our pricing starts from £25 per device per month, excluding VAT and licences. We confirm the price after the Windows estate review, once we know how many devices and users you have.
Tell us how many PCs you have and how they are looked after today. We will review them and give you a plan to get every device onto a supported, secure Windows 11 set-up.
London head office
Postremo IT Limited
Level 24, One Canada Square
Canary Wharf
London E14 5AB
+44 20 7550 9103
info@postremoit.com
Also in Dubai
Business Bay, Dubai
Your brief: