How we've helped Perth businesses fix real IT problems - migration projects, security uplifts, and infrastructure overhauls with measurable outcomes.
Client details have been anonymised. Outcomes are from actual engagements. Results are specific to individual circumstances and are not guaranteed to be representative of all engagements.
Custom Visitor Management SystemAutomation
Custom Visitor Management System
The Challenge
A Perth industrial site was relying on a paper sign-in book at reception to log every visitor and contractor. There was no reliable way to notify hosts when someone arrived, no record of who had acknowledged site safety inductions, and no accurate list of who was on site in an emergency - a genuine WHS risk during a muster. Reception staff were manually calling or walking around to track down hosts, and the paper log itself was frequently illegible or incomplete.
What We Did
Built a custom visitor sign-in system from scratch, deployed on a tablet at reception, replacing the paper sign-in book entirely
Configured the sign-in flow to capture visitor name, contact details, company, host, and purpose of visit before entry is granted
Built in mandatory site induction and safety declaration steps - visitors acknowledge site rules and WHS requirements as part of sign-in, with digital acceptance time-stamped and stored
Implemented instant host notifications by email and SMS the moment a visitor signs in, removing the need for reception to manually track down staff
Developed an emergency muster list view - a live, accurate list of everyone currently on site, accessible instantly during an evacuation or drill
Added QR code pre-registration for expected visitors and regular contractors, letting them scan in on arrival and skip the manual form
Built an admin dashboard for reporting and exporting visitor history, supporting audit and compliance record-keeping
The Outcome
The paper sign-in book was retired entirely. Hosts are now notified within seconds of a visitor arriving, removing the manual chasing that used to fall on reception. Every visitor's safety induction acknowledgement is recorded and time-stamped, giving the business a defensible compliance record it didn't have before. In the event of an emergency, the site now has an accurate, instantly accessible muster list instead of relying on a physical book that may not reflect who is actually on site.
A Perth professional services firm had been running on an ageing on-premise Exchange 2013 server and a local file server for over a decade. Staff working from home couldn't access files without a slow, unreliable VPN. The server was approaching end of extended support, and no backups had been tested in years. A ransomware incident at a nearby firm prompted the business owner to act.
What We Did
Migrated 14 mailboxes, shared mailboxes, and 8 years of email history from Exchange 2013 to Microsoft 365 Exchange Online over a weekend with zero data loss
Migrated all shared file server content to SharePoint and OneDrive - staff can now access files from any device without VPN
Deployed Microsoft Intune across all 14 laptops - enforcing BitLocker encryption, screen lock, and endpoint protection from the cloud
Enabled MFA and Conditional Access policies across all accounts - blocking access from unmanaged devices
Decommissioned the on-premise server, eliminating server hardware, licences, and maintenance costs
The Outcome
The firm eliminated significant recurring costs across server hosting, hardware maintenance, and legacy software licences. Staff reported immediate improvement in file access speed and remote work reliability. Security posture improved substantially within 30 days of migration, measured against Microsoft Secure Score benchmarks.
A Perth trade business with three locations - main office, warehouse, and a second branch - was running consumer-grade routers at each site with no centralised management. Internet outages at the warehouse were causing significant operational disruption. All three sites were on the same flat network, with no separation between point-of-sale systems, staff devices, and guest WiFi. A business email compromise attempt had recently targeted their accounts payable team.
What We Did
Deployed FortiGate 60F firewalls at all three sites with centralised management via FortiManager
Configured proper network segmentation at each site: staff network, guest WiFi, POS/payment network, and management network each isolated from one another
Implemented FortiGuard IPS, web filtering, and SSL inspection - blocking known malicious domains before they reach staff devices
Installed SD-WAN with 4G failover at the warehouse - automatic internet failover within 30 seconds of primary connection failure
Deployed Microsoft 365 MFA and Defender for Office 365 Safe Links across all accounts, directly addressing the BEC risk
Set up centralised patch management through the RMM platform - all three sites patched on a consistent schedule
The Outcome
Zero unplanned outages at the warehouse in the six months following deployment. A phishing simulation run internally after training showed a substantial reduction in staff click rates compared to before security controls were implemented. All three sites are now monitored and managed from a single dashboard.
A Perth business was dealing with an unreliable WiFi connection. Devices would drop off or slow to a crawl in some parts of the premises while working normally in others - the kind of intermittent fault that's easy to blame on the internet connection, the devices, or the provider, and hard to actually prove. The business needed the real cause found and fixed, not another round of restarting the router and hoping.
What We Did
Carried out an on-site assessment of the existing wireless setup, the layout of the premises, and where connection problems were occurring
Used professional wireless analysis software to measure signal strength and coverage across the site, turning a vague 'the WiFi is bad' complaint into measurable data
Worked methodically through the possible causes, ruling each in or out based on the readings rather than guesswork
Identified the root cause: the existing wireless network wasn't providing reliable coverage to the affected areas
Extended the wireless network into the problem areas, with placement guided by the analysis so the new coverage filled the gaps
Confirmed a stable connection in the previously affected areas once the extension was in place
The Outcome
The WiFi issue was resolved and the previously affected areas now have a reliable connection. Because the fix was based on measured data rather than trial and error, the business got a targeted solution to the actual problem. The client left a Google review: "Hoss from Top Tier Computing resolved a complex WIFI connection issue for us in a very methodical and meticulous way. Well done, and thank you Hoss."
A Perth school was running three separate Windows Server 2012 file servers - each managing different departments - with end of extended support approaching. Data was fragmented across environments, permissions were inconsistent, and maintaining three separate server estates was creating significant administrative overhead. The school needed to consolidate and modernise without disrupting day-to-day operations.
What We Did
Assessed all three file server environments and documented existing permissions, share structures, and data ownership across departments
Planned and executed a phased migration of all file data to a consolidated Windows Server 2019 environment using Robocopy, preserving NTFS permissions and ensuring access continuity throughout
Tightened permission structures and simplified share layouts during the migration in line with least-privilege principles
Validated all data integrity and access continuity before decommissioning each legacy server
Decommissioned all three Windows Server 2012 environments on completion, reducing infrastructure footprint from three servers to one
The Outcome
Administrative overhead was significantly reduced - permissions management became centralised and consistent. The three legacy Windows Server 2012 environments were fully decommissioned, cutting licensing and maintenance costs. The school moved into the new term with a clean, manageable infrastructure environment.
A Perth school was spending significant IT and admin staff time on repetitive manual tasks each term - uploading student and staff roster data to Microsoft School Data Sync required manual CSV preparation and submission, and distributing newly created parent account credentials required individual manual emails. These tasks were consuming hours of staff time and were prone to delays and errors.
What We Did
Automated the Microsoft School Data Sync (SDS) CSV upload process using Power Automate - eliminating the manual upload cycle and removing the risk of human error in data submission
Built an automated email workflow for distributing parent account usernames and passwords - new credentials are delivered automatically when accounts are created, with no IT involvement required
Extended the parent communication workflow to include SMS notifications via ClickSend API integration - ensuring credentials reach parents reliably even where email delivery is uncertain
The Outcome
Manual time spent on SDS management was eliminated entirely. Parent credential distribution became fully automatic with no IT or admin staff involvement required per cycle. The SMS integration significantly improved delivery confidence, with parents receiving credentials through a second channel as a fallback. The school reported noticeably fewer support requests related to parent login issues.
A Perth small business managing self-hosted web services and infrastructure needed to secure their public-facing environment without exposing servers directly to the internet. Their website was relying on Google reCAPTCHA on contact forms, but the business wanted to reduce dependency on Google services while maintaining effective bot protection. Inbound firewall ports were open to support public-facing services, and bot traffic and spam form submissions were increasing.
What We Did
Implemented Cloudflare Tunnel (Cloudflared) to route all public-facing traffic through Cloudflare without any open inbound firewall ports - eliminating direct exposure of the hosted infrastructure to the internet
Replaced Google reCAPTCHA across all website forms with Cloudflare Turnstile - improving privacy and reducing dependency on Google services while maintaining effective bot protection
Configured Cloudflare DNS proxying across all subdomains - masking the origin server IP and enabling Cloudflare's DDoS mitigation and bot detection layers
Implemented Cloudflare security rules and rate limiting to reduce malicious traffic reaching the origin server
Managed SSL certificate deployment and renewal across all hosted services
The Outcome
The business eliminated all direct public exposure of their hosted infrastructure - no inbound firewall ports remain open. Bot and spam form submissions dropped significantly following Turnstile implementation. All hosted services are now accessible through Cloudflare Tunnel with the origin IP fully masked. The removal of Google reCAPTCHA improved privacy compliance and the experience for legitimate users.
A Perth construction company with office and site-based staff was running a mix of personal phones, shared laptops, and a consumer-grade router at the office. Field supervisors were emailing photos from personal Gmail accounts, job files were stored on a single laptop with no backup, and there was no way to remotely access documents from site. A stolen laptop containing unencrypted project files and subcontractor contracts prompted an urgent review.
What We Did
Deployed Microsoft 365 Business Premium across all 22 staff - office and field teams now share a single platform for email, files, and communication
Migrated all project files and contracts to SharePoint with folder-level permissions - site supervisors access current project documents from any device without emailing attachments
Enrolled all company devices in Microsoft Intune - enforcing BitLocker encryption, remote wipe, and screen lock on all laptops and shared tablets
Replaced the consumer router with a FortiGate firewall - segmented guest WiFi, separated office and site management networks
Configured Microsoft Teams as the primary communication channel - replacing WhatsApp groups for job coordination between office and site teams
Set up automated cloud backup for all SharePoint content and OneDrive accounts with 90-day retention
Implemented MFA on all accounts - including the project management software portal and accounting system
The Outcome
The stolen laptop incident became a non-event - the device was remotely wiped and no data was compromised. Field teams reported a significant reduction in back-and-forth calls requesting documents, with measurable time savings from improved file access and communication. IT costs consolidated from multiple ad-hoc subscriptions and reactive callouts to a single predictable monthly fee.
A Perth professional services firm had reached the end of support on their aging wireless access points and unmanaged switches. Staff were experiencing frequent connectivity drops, dead zones on the second floor, and there was no ability to segment the network between staff, guests, and meeting room devices. Consumer-grade switches meant VLANs could not be enforced, and there was no central visibility across the wireless environment. A hardware failure on a core switch accelerated the decision to migrate to a new vendor.
What We Did
Audited the existing wireless and switching estate - documented port assignments, traffic patterns, and failure points before any changes were made
Deployed enterprise managed switches with full VLAN capability, replacing unmanaged units across both floors - cut over port by port during a planned maintenance window
Installed enterprise-grade access points managed through a cloud controller, replacing all legacy APs with proper coverage design and channel planning
Configured SSID structure across separate VLANs - corporate staff network, guest WiFi, IoT/meeting room devices, and management traffic all isolated from one another
Migrated all trunk and access port configurations from the legacy switches to the new environment with full validation before decommissioning each old unit
Handed over centralised cloud management dashboard providing real-time visibility across all switch ports and access points
The Outcome
Staff connectivity issues resolved on cut-over day. Dead zones on the second floor were eliminated through proper access point placement and channel configuration. The IT team gained centralised visibility across all network infrastructure for the first time. The legacy unmanaged switches and access points were fully decommissioned with no data loss or extended downtime during the migration.
A Perth healthcare administration business was running an end-of-life firewall that had stopped receiving security updates. The rule base had accumulated years of redundant and overly permissive rules, the interface lacked modern application-layer visibility, and the vendor had announced full end-of-life. The business needed to migrate to a next-generation firewall platform without interrupting operations or leaving a gap in perimeter protection during cut-over.
What We Did
Performed a full audit of the existing firewall rule base - identified and flagged redundant, shadowed, and overly permissive rules before beginning the migration
Translated the cleaned rule base to the target NGFW platform, mapping firewall objects, NAT rules, VPN tunnels, and access policies to their equivalents
Configured NGFW capabilities on the new platform - application control, IPS signatures, and SSL inspection - none of which were available on the legacy device
Ran the new firewall in parallel with the existing device for a validation period, confirming policy parity before any cut-over
Executed the cut-over during a scheduled maintenance window - full connectivity restored within minutes of switching over
Documented the final rule base and security policy configuration for ongoing management reference
The Outcome
The organisation moved from an unsupported end-of-life perimeter device to a fully supported NGFW with active threat intelligence feeds. Rule count was reduced by removing redundant entries identified during the audit. No disruption to business operations occurred during the cut-over. The business met their compliance obligation to maintain a supported security perimeter.
A Perth school had a mixed fleet of macOS laptops, iPads, and Windows devices with no centralised MDM in place. Apple devices were provisioned manually - configuration profiles applied by USB or hand-configured, with no way to deploy apps silently, enforce restrictions remotely, or wipe lost devices. Windows devices had no Intune enrollment. Staff and student devices were unmanaged, unmonitored, and difficult to support at scale. A lost iPad with no remote wipe capability prompted an urgent review.
What We Did
Enrolled all Apple devices (macOS and iPadOS) through Apple School Manager and Jamf - automated enrollment means new devices are provisioned to the correct configuration on first boot without manual setup
Configured device restrictions, app management, and configuration profiles through Jamf for both macOS and iPadOS fleet - apps deployed silently with no user interaction required
Enrolled all Windows devices in Microsoft Intune - enforcing BitLocker encryption, screen lock policies, and compliance requirements
Configured Conditional Access in Microsoft Entra ID requiring managed and compliant device status before accessing Microsoft 365 resources
Set up remote wipe, locate, and lock capabilities across the full device fleet - Apple through Jamf, Windows through Intune
Documented device lifecycle processes - enrollment, provisioning, and decommissioning - for ongoing IT management
The Outcome
The school moved from zero MDM coverage to full management of every device across both Apple and Windows platforms. The lost iPad was remotely wiped within hours of the new system going live. App deployments that previously required physical access to each device are now handled centrally. The IT team can enforce policy, deploy software, and respond to lost or stolen devices across the entire fleet from a single set of management consoles.
A Perth professional services business discovered their on-premises Exchange server had been compromised through an unpatched Exchange vulnerability. Suspicious emails were being sent from multiple staff accounts without their knowledge, and a web shell was identified on the server giving an attacker persistent access. Mail flow integrity was at risk, and the business needed immediate containment followed by thorough remediation - without losing access to years of email data.
What We Did
Immediately isolated inbound and outbound SMTP traffic while preserving the internal mail queue and existing mailbox data
Identified and removed all web shells and malicious files from the Exchange installation directory and IIS configuration
Applied all outstanding Exchange Cumulative Updates and security patches - closing the vulnerability used for initial access
Ran a full antimalware scan across the server OS and verified clean state before restoring mail flow
Audited all mailbox accounts and admin permissions for malicious inbox rules, forwarding addresses, and delegations - removed every unauthorised configuration found
Hardened IIS and Exchange virtual directory settings to reduce the external attack surface going forward
Restored normal mail flow and monitored SMTP logs and account activity closely over the following week
The Outcome
The Exchange server was returned to clean operation with no further malicious activity detected post-remediation. All mailbox data was preserved with no loss. Following the incident, the business accelerated their planned migration to Microsoft 365 Exchange Online - removing the on-premises Exchange attack surface entirely.
A Perth trade business with office and field staff had inconsistent endpoint protection across their device fleet - some machines had consumer antivirus, others had nothing. Remote staff were connecting via a legacy VPN solution with no MFA and no way to validate device posture before granting access. There was no central visibility into endpoint health, and IT had no way to identify whether connected devices were patched and compliant. A failed audit flagged the gaps and the business needed a cohesive endpoint security solution.
What We Did
Deployed FortiGate as the central network enforcement point across both sites, integrating with the existing network architecture
Deployed FortiClient EMS (Endpoint Management Server) to centrally manage and push FortiClient to all corporate endpoints
Configured FortiClient with endpoint protection, web filtering, and SSL VPN - replacing the legacy VPN solution with a unified, managed client
Enforced device compliance posture checks - devices must have FortiClient installed and compliant before SSL VPN access is permitted
Integrated FortiClient EMS with FortiGate as part of the Security Fabric - endpoint telemetry and threat events visible centrally alongside network traffic
Configured split tunnelling and user-group access policies - remote users only route traffic to the resources their role requires, not the entire internal network
The Outcome
All corporate endpoints now have consistent, centrally managed endpoint protection for the first time. Remote access is enforced through FortiClient with posture validation - unmanaged or non-compliant devices cannot connect. The IT team gained complete visibility into endpoint health, FortiClient status, and VPN connection activity across the organisation. The business passed their follow-up security review.
A Perth professional services business was running a traditional remote access VPN that had become a growing source of frustration - compatibility issues with newer operating systems, frequent reconnection failures for remote staff, and a support burden on the IT team. Beyond the usability problems, the VPN granted connected users broad access to the internal network rather than access scoped to what each person actually needed. The business wanted modern, reliable remote access without the overhead of managing VPN infrastructure.
What We Did
Deployed Cloudflare Tunnel (Cloudflared) on internal infrastructure - all internal application traffic routed through Cloudflare's network without exposing any ports to the internet
Configured Cloudflare Access policies for each internal application - users authenticate via Microsoft Entra ID (SSO) before gaining access to specific resources, with no network-level access granted
Deployed the Cloudflare WARP client on all staff endpoints for device-based Zero Trust access and DNS-over-HTTPS filtering
Defined per-application access policies by user group - each staff member can only reach the applications their role requires, not the full internal network
Integrated identity provider (Entra ID) with Cloudflare Access - MFA enforced at the identity layer for all application access
Decommissioned the legacy VPN infrastructure following successful WARP rollout and a parallel validation period
The Outcome
Remote access issues and VPN reconnection complaints stopped on the day of cut-over - WARP is transparent in day-to-day use and requires no manual intervention from staff. Per-application access policies replaced broad VPN network access, significantly reducing the potential blast radius of any compromised account. The legacy VPN infrastructure was fully decommissioned, removing an attack surface and eliminating ongoing VPN maintenance overhead.
A Perth retailer running Shopify had sales data locked inside their platform - accessible only through Shopify's basic built-in reports. There was no visibility into margins by product, customer lifetime value, repeat purchase rates, or inventory performance across SKUs. The owner was making ranging and pricing decisions based on gut feel because the native reporting couldn't answer the questions that mattered. High-volume products were assumed to be profitable; slow stock wasn't surfaced until it became a write-off problem.
What We Did
Connected Power BI to Shopify via the API - live data pull with no manual exports or spreadsheet uploads required
Built a sales dashboard showing daily, weekly, and monthly revenue, order volume, average order value, and channel performance with trend lines and period-over-period comparison
Incorporated cost of goods data to build a profitability dashboard showing gross margin by product and category - making the margin story visible for the first time
Built a customer analytics view covering customer lifetime value, repeat purchase rate, new vs returning customer split, and customer segmentation by spend tier
Added an inventory dashboard tracking live stock levels by SKU, days of inventory remaining, and fast-moving vs slow-moving product identification
Configured automatic daily data refresh - the dashboard reflects current data every morning without any manual action
Delivered a walkthrough session so the owner could navigate the dashboard, apply filters, and drill through to underlying transactions independently
The Outcome
The owner identified several product lines with high sales volume but negative or near-zero margins - entirely invisible in Shopify's native reports. Within 30 days of the dashboard going live, two product lines were repriced and one discontinued. Inventory management improved significantly once stock velocity by SKU was visible - slow-moving stock was identified and cleared before it became a write-off. The owner now reviews the dashboard daily as part of their morning routine, replacing ad-hoc Shopify exports and manual spreadsheet work.
Xero Financial Dashboard for a Perth Small BusinessAnalytics
Xero Financial Dashboard for a Perth Small Business
The Challenge
A Perth small business was running Xero for its accounting but had no easy way to see the bigger financial picture. Reviewing cash flow, profit by month, or how actual spending tracked against budget meant logging into Xero, exporting reports, and rebuilding them in a spreadsheet - a process that took hours each month and was usually a few weeks out of date by the time anyone looked at it. The owner was making spending and hiring decisions without a clear, current view of where the business actually stood financially.
What We Did
Connected Power BI to Xero via the API - live financial data pulled directly from the ledger with no manual exports or spreadsheet rebuilding required
Built a cash flow dashboard showing incoming and outgoing cash by week and month, with a rolling forward view based on outstanding invoices and bills
Built a profit and loss view broken down by category and cost centre, with month-on-month and year-on-year comparison so trends are visible at a glance
Added a budget-versus-actual view so the owner could see exactly where spending was tracking ahead of or behind plan, by category
Built an accounts receivable view highlighting overdue invoices by customer and age, making it easier to follow up on outstanding payments
Configured automatic daily data refresh - the dashboard reflects current Xero data each morning with no manual action required
Delivered a short walkthrough session so the owner could navigate the dashboard and drill into the numbers independently
The Outcome
The owner went from a multi-hour monthly reporting routine to a live dashboard that's always current. Overdue invoices became visible and were followed up faster, improving cash collection. Spending against budget was caught early in categories that had previously only been reviewed at financial year end. The owner now checks the dashboard weekly as part of running the business, rather than waiting for an end-of-month catch-up.
A Perth business was managing all IT support requests through email and phone calls, with no structured way to track issues, assign them to the right person, or follow up on outstanding items. Support requests were being missed, resolved issues had no documented history, and there was no visibility into how long problems were taking to resolve. The business needed a system their staff could use to log issues, and their IT team could use to manage and prioritise the queue.
What We Did
Built a custom ticketing system from scratch - tailored to the business's specific support categories, priority levels, and team structure rather than adapting a generic off-the-shelf platform
Developed a staff-facing submission portal where users can log support requests, describe the issue, set urgency, and attach screenshots or supporting files
Built an agent dashboard allowing IT staff to view the full ticket queue, filter by status and priority, assign tickets to team members, and add internal notes or client-visible responses
Implemented automated email notifications - staff receive confirmation when their ticket is submitted, and are updated when its status changes or a response is added
Built a ticket status tracking view so staff can check the current status of their open requests without needing to follow up by phone or email
Configured priority tiers and SLA tracking within the dashboard, giving the IT team visibility into which tickets are approaching or breaching their response targets
The Outcome
Support requests moved from a scattered email inbox to a structured, searchable queue with clear ownership and status tracking. Missed requests dropped significantly once every issue had a ticket number and an assigned owner. The IT team gained visibility into their workload and resolution times for the first time, and staff stopped following up by phone because they could see the status of their own tickets.
A Perth retailer operating multiple Shopify stores had no way to view performance across their entire business in one place. Each store was reported on independently through Shopify's native interface. Cross-store comparisons required manually exporting data from each account and combining it in spreadsheets - a process that was time-consuming, error-prone, and happened too infrequently to drive timely decisions. There was no visibility into which store was driving the most profitable orders, how inventory was performing across locations, or where to focus buying and marketing effort.
What We Did
Connected Power BI to all Shopify stores via the API - live data pull from each store into a single centralised model with no manual exports required
Built a consolidated sales dashboard showing revenue, order volume, and average order value across all stores - with the ability to view combined totals or drill into individual store performance
Incorporated cost of goods data across stores to surface gross margin by product and category at the business-wide level
Built an inventory dashboard tracking stock levels across all stores by SKU, identifying fast-moving and slow-moving products and flagging low-stock items requiring attention
Added period-over-period comparison views - daily, weekly, and monthly trends with year-on-year benchmarking across the combined store estate
Configured automated daily data refresh across all store connections - the dashboard reflects current data every morning without manual intervention
The Outcome
The business owner gained a single consolidated view of performance across all stores for the first time. Cross-store comparisons that previously required hours of manual spreadsheet work became available on demand. Inventory buying decisions improved once stock performance across all locations was visible in one place. The dashboard replaced ad-hoc store-by-store reporting entirely.
A Perth e-commerce business running multiple Shopify stores had no automated way to track stock levels across their online presence. Low-stock situations were only identified when customers encountered out-of-stock products at checkout or when staff manually checked each store. By the time stock issues were noticed, sales had already been lost and supplier lead times meant restocking took days. Management had no regular visibility into inventory status without logging into each store individually.
What We Did
Built a custom inventory monitoring solution that pulls live stock level data from all Shopify stores via the API on a scheduled basis
Configured automated low-stock detection logic - products falling below defined threshold levels across any store trigger immediate alerts without manual checking
Developed scheduled email reports delivered to management each morning summarising current stock positions, flagged low-stock items, and any products that had gone out of stock overnight
Designed the reporting to be actionable without logging into Shopify - current inventory status delivered directly to the inbox
The Outcome
Manual stock monitoring across multiple stores was eliminated. Low-stock situations are now identified automatically before they result in lost sales, giving the team lead time to reorder. Management have reliable daily visibility into inventory health across their entire online operation without accessing each store individually.
Active Directory Automation & User ProvisioningAutomation
Active Directory Automation & User Provisioning
The Challenge
A Perth business was managing all staff onboarding and offboarding manually through Active Directory. Creating a new account required IT staff to work through a checklist of manual steps - creating the user, setting group memberships, configuring email, setting up shared drive access, and then separately communicating login credentials to the new employee. The process was inconsistent, took significant IT time, and errors were common - new starters regularly arrived on their first day with missing access or incorrect group membership. Offboarding had similar problems, with accounts sometimes remaining active days after a staff member had left.
What We Did
Developed a PowerShell-based onboarding automation framework that handles the full account creation process from a single structured input - user details, role, department, and start date
Automated group membership assignment based on role and department - the correct access permissions are applied consistently every time without manual selection
Built automated email and SMS notification workflows - new starters receive their login credentials and initial setup instructions automatically on account creation, with no IT staff involvement in the delivery step
Developed an offboarding automation that disables accounts, revokes group memberships, and archives mailboxes on a defined schedule - eliminating the risk of accounts remaining active after a staff member's departure
Documented the provisioning framework so non-technical staff can initiate onboarding requests through a simple form, with automation handling the execution
The Outcome
Account creation time reduced from a multi-step manual process to minutes. New starters consistently receive the correct access on day one. Credential delivery became automatic - IT staff are no longer the bottleneck between account creation and the employee receiving their login details. Offboarding became reliable and auditable, with accounts deactivated on schedule rather than dependent on someone remembering to act.
A Perth organisation was using shared pre-shared keys for wireless network access across their corporate environment. Any device that knew the passphrase could connect, with no way to distinguish between managed corporate devices and personal or unmanaged devices. Access credentials were shared informally between staff and contractors, and there was no mechanism to revoke access for a specific device without changing the passphrase for everyone. A security review flagged the absence of device-level authentication as a significant gap.
What We Did
Deployed a cloud-managed PKI and certificate management platform to issue and lifecycle-manage device certificates across the corporate device fleet
Configured RADIUS-based network authentication - wireless and wired network access requires a valid device certificate, replacing the shared passphrase entirely
Integrated the certificate authority with the MDM platform - device certificates are deployed and renewed automatically as part of device management, with no manual certificate installation required on end-user devices
Configured network access policy to enforce certificate-based authentication - devices without a valid managed certificate cannot authenticate to the corporate network regardless of any shared credential
Set up certificate lifecycle management including automatic renewal and revocation - individual devices can be removed from network access without affecting any other device
The Outcome
The organisation moved from shared-passphrase wireless access to device-certificate authentication across the entire corporate environment. Unmanaged and personal devices can no longer authenticate to the corporate network. Individual device access can be revoked immediately when a device is lost, stolen, or decommissioned. The security review gap was closed and the organisation passed their follow-up assessment.
A Perth small business was running Google Ads independently but seeing poor returns. Campaigns had been set up without structured keyword research, ad copy was not aligned to the search intent of the target audience, and there was no conversion tracking in place - meaning there was no way to determine which clicks were generating enquiries or which campaigns were driving revenue. Budget was spread across a broad set of keywords with no visibility into what was working. Monthly spend was significant but enquiry volume was not reflecting the investment.
What We Did
Performed structured keyword research to identify high-intent search terms relevant to the business's services, audience, and local market
Restructured campaigns around tightly themed ad groups with ad copy matched to specific search intent - replacing broad, unfocused campaigns with targeted ones
Implemented conversion tracking across all enquiry points - form submissions, phone call clicks, and key website actions - giving the account visibility into which clicks were generating actual leads
Developed ad copy and call-to-action variations for A/B testing across the primary ad groups
Implemented negative keyword lists to eliminate irrelevant traffic consuming budget without conversion potential
Set up ongoing optimisation reviews - adjusting bids, pausing underperforming keywords, and reallocating budget to the highest-performing ad groups based on conversion data
The Outcome
Conversion tracking made the performance picture clear for the first time - a significant portion of prior spend had been going to keywords generating clicks but no enquiries. Budget was reallocated to the terms and campaigns demonstrating actual conversion activity. Cost per lead reduced substantially once wasted spend was identified and cut. The business gained a clear picture of which campaigns were driving enquiries, allowing ongoing budget decisions to be made on evidence rather than assumption.
Server Consolidation: 3 Traditional Servers to a 2-Node HCI ClusterManaged IT
Server Consolidation: 3 Traditional Servers to a 2-Node HCI Cluster
The Challenge
A Perth business was running three separate physical servers, each ageing, approaching end of vendor support, and each carrying its own licensing and maintenance cost. None of the three had any built-in redundancy - if one server failed, every workload running on it went down with it. Performance was becoming a bottleneck as demand grew, and the business was facing a hardware refresh decision: replace three ageing servers with three new ones, or rethink the approach entirely.
What We Did
Assessed all three legacy servers and the workloads running on each, mapping dependencies before planning the migration
Deployed a 2-node Hyper-Converged Infrastructure (HCI) cluster using Windows Server, Hyper-V, and Storage Spaces Direct (S2D) to pool compute and storage across both nodes
Migrated every workload from the three legacy servers onto the new HCI cluster with a planned, staged cutover to avoid disruption
Configured the shared storage pool across both nodes so no single server is a point of failure for any workload
Validated node-level failover - confirmed that workloads stay online if one of the two nodes goes down
Decommissioned all three legacy servers once migration and validation were complete, cutting the physical server count from three to two
Documented the new cluster configuration for ongoing management and future capacity planning
The Outcome
The business reduced its physical server footprint while increasing resiliency - a result the old three-server setup could never have delivered. Licensing, power, and maintenance costs dropped with fewer physical units to support and patch. The ageing hardware and end-of-support risk that triggered the project was eliminated, and the business now has built-in node failover that didn't exist before, without needing a third server to get it.
A Perth service business was running a website built years earlier on an outdated platform - slow to load, not mobile-friendly, and with no SEO structure in place. The site ranked nowhere for the services and suburbs the business actually wanted to be found for, and most new customers were coming from word-of-mouth and repeat business rather than the website. The owner suspected the site was actively costing them enquiries but had no way to confirm it.
What We Did
Rebuilt the website on a modern, mobile-first platform with fast load times treated as a baseline requirement, not an afterthought
Restructured every page with proper heading hierarchy, unique meta titles and descriptions, and schema markup so Google could understand what each page was about
Built dedicated service and location pages targeting the specific services and suburbs the business wanted to rank for, rather than one generic services page
Claimed and fully optimised the Google Business Profile - categories, service areas, photos, and business description aligned with the new website
Connected Google Analytics and Search Console so enquiry sources and search performance were visible for the first time
Set up clear calls-to-action and contact forms on every page, removing friction between a visitor finding a page and getting in touch
The Outcome
Within weeks of launch, the business began ranking on the first page of Google for several of its target service-and-suburb search terms - rankings it had never held before. Contact form submissions and phone enquiries increased noticeably, with the owner specifically noting more callers mentioning they'd found the business through Google. Search Console data confirmed the new pages were indexed and receiving impressions for terms the old site never ranked for at all.
A Perth business was managing their IT infrastructure entirely reactively - problems were identified when staff reported them or systems stopped working, not before. There was no visibility into server health, service status, disk capacity, or network performance between incidents. Critical services had failed and gone unnoticed until end users raised support requests, and there was no historical data to identify recurring issues or gradual degradation trends. IT staff were always responding to problems they had no warning of.
What We Did
Deployed a centralised infrastructure monitoring platform across the server and network environment - agents installed on all monitored endpoints and services
Configured service health checks, performance thresholds, and availability monitoring across servers, network devices, and critical business applications
Built automated alerting to notify the IT team immediately when a service goes down, a threshold is breached, or a device becomes unresponsive - before end users are affected
Configured disk capacity monitoring with trend-based alerting - flagging volumes approaching capacity days in advance rather than when they fill
Set up a scheduled health summary report delivered automatically to the IT team, providing a consistent view of system status across the environment
Built a monitoring dashboard providing real-time visibility into system health, current alerts, and historical availability across all monitored devices
The Outcome
The IT team gained continuous visibility into infrastructure health for the first time. Several issues - including a volume approaching capacity and a service entering a degraded state - were identified and resolved before they affected end users. Reactive support calls related to infrastructure failures reduced as problems were caught earlier. The IT team shifted from purely reactive troubleshooting to proactive infrastructure management.
Cloud Wireless Migration & Access Control ConsolidationNetworking
Cloud Wireless Migration & Access Control Consolidation
The Challenge
A Perth organisation was running their enterprise wireless environment on a legacy on-premise wireless controller, alongside a separate dedicated network access control platform managing authentication policy. The dedicated NAC solution was approaching licence renewal - a significant cost - and the on-premise wireless controller required ongoing hardware maintenance and lacked cloud management capabilities. The IT team was managing two separate systems to deliver what was functionally a single outcome: controlled, authenticated wireless access for staff and devices.
What We Did
Migrated the full wireless environment from the legacy on-premise controller to a cloud-managed wireless platform - all access points migrated and reconfigured under the new cloud management system
Evaluated the cloud platform's built-in policy enforcement and network access control capabilities against the existing dedicated NAC deployment - mapping which functions were covered natively by the new platform
Migrated authentication policies, SSID configurations, VLAN assignments, and device group rules from the dedicated NAC platform to the cloud controller's built-in policy engine
Validated that all access control outcomes - corporate device authentication, guest isolation, VLAN tagging by device type - were fully replicated in the new environment before decommissioning anything
Ran both environments in parallel during a validation period to confirm policy parity before cutting over fully
Decommissioned the dedicated NAC platform and legacy on-premise controller following successful validation
The Outcome
The organisation eliminated the dedicated NAC licence renewal cost by consolidating network access control into the cloud wireless platform's native capabilities. Wireless management and access policy are now managed from a single platform rather than two separate systems. The legacy on-premise wireless controller was fully decommissioned. IT overhead associated with maintaining and integrating two separate platforms was removed.
Microsoft 365 Reseller-to-Direct HandoverCloud & M365
Microsoft 365 Reseller-to-Direct Handover
The Challenge
A Perth business had its Microsoft 365 email locked inside GoDaddy's reseller platform - a common setup for businesses that started with GoDaddy for domain registration and were upsold into bundled email. The restricted reseller admin panel meant no access to the full Microsoft 365 admin center, no ability to configure advanced settings, and every change had to go through GoDaddy's support queue. As the business grew and needed a proper managed IT relationship, moving to direct management became essential - but with a hard requirement: zero data loss and minimal disruption to years of email history, calendars, and contacts.
What We Did
Audited the existing Microsoft 365 environment - license types, connected domains, and any add-on services tied to the reseller account - before planning the handover
Chose a direct tenant handover over a full mailbox migration - transferring administrative control of the existing Microsoft 365 organisation without touching the underlying data, so mailboxes, calendars, contacts, and files stayed exactly where they were
Coordinated directly with GoDaddy support to initiate the formal handover process, verifying account ownership and contact details upfront to avoid delays
Sequenced the license purchase and reassignment carefully to avoid the most common failure point in these handovers - unassigning old licenses before new ones are active, which stops mail flow entirely
Verified sign-in, tested mail flow, and confirmed existing MFA and security settings remained intact at every stage
Kept the client updated in plain language throughout, so non-technical decision-makers understood what was happening and why
The Outcome
The handover was completed with zero data loss - every email, contact, and calendar entry preserved exactly as it was - and no meaningful downtime, with only brief, controlled gaps during the final license reassignment step. The client's Microsoft 365 environment is now under direct administrative control, with no reseller restrictions, faster support, and access to the full range of Microsoft 365 capabilities. With direct management in place, the business is now positioned to adopt Teams and SharePoint for collaboration and move from reactive troubleshooting to proactive, ongoing IT support.
Every engagement starts with a free, no-obligation assessment. We review your current setup, identify the gaps, and show you exactly what we'd do - and what it would cost.