Zero Trust

Identity & Protection & Compliance

Identity, protection and compliance across Active Directory, Microsoft Entra ID, Defender and Purview, including AD and Entra ID security audits.

Identity is the control plane for modern IT. LCserv connects Active Directory, Microsoft Entra ID, authentication, Conditional Access, protection and compliance controls so access decisions are consistent across on-premises and cloud services.

One identity architecture, not isolated controls

Work starts with directory structure, trust and synchronization paths, authentication methods, privileged access, application dependencies and sign-in risks. LCserv also performs Active Directory and Microsoft Entra ID audits to identify configuration weaknesses, excessive privileges, identity risks and control gaps. Findings are documented, prioritized and accompanied by practical recommendations for remediation. From there we design hybrid identity, SSO, MFA and Conditional Access together with Microsoft Defender and Purview capabilities where they support the required security and compliance outcomes.

Typical engagements

  • Active Directory and hybrid identity
  • Active Directory security audits
  • Microsoft Entra ID audits
  • Documented findings and remediation recommendations
  • Microsoft Entra ID and SSO
  • MFA and Conditional Access
  • Privileged identity and administrative security
  • Microsoft Defender integration
  • Microsoft Purview, DLP and compliance controls

Execution & handover

The objective is a security model that administrators can understand, users can work with and auditors can trace. Audit engagements therefore deliver both evidence and an actionable remediation path, not just a list of findings.

Related work

Experience in practice.

Angioni Sanitärhandel

Rebuilding the server infrastructure

Rebuilt Microsoft server/client infrastructure and AD, implemented SBS/Exchange, backup and document archiving, and trained users.

Microsoft 365 & Azure CloudIdentity & Protection & Compliance
View project →
Fuchsbrot GmbH

Meisterbäcker Fuchs GmbH & Co. KG

Planning and implementation of the IT environment including server, Exchange, SQL, backup, production-line integration and employee training.

Microsoft 365 & Azure CloudIdentity & Protection & Compliance
View project →
GES Systemhaus GmbH

Exchange 2010/2013 to Office 365 / Azure AD hybrid migration

Inventory, planning, preparation, implementation and documentation of a hybrid migration.

Microsoft 365 & Azure CloudIdentity & Protection & Compliance
View project →
LEONI Kabel GmbH

Level 3 support for Exchange / EMM / IronPort

Global mail and mobile-device-management support in an environment with more than 80,000 mailboxes.

Microsoft 365 & Azure CloudIdentity & Protection & Compliance
View project →
Rheinmetall AG

Various international infrastructure projects

International project and escalation management covering VPN, relocations, network/infrastructure, domain migrations, licensing, logistics-center/factory coordination and FollowMe Print.

Identity & Protection & ComplianceConsulting & Project Management
View project →
Sartorius AG

L3 MDM / Endpoint Management support

MobileIron Cloud support, architecture input, security implementation, environment cleanup, global device rollout and documentation.

Identity & Protection & ComplianceMDM & MAM & Provisioning & Lifecycle Management
View project →