Galbraith LLP Cuts OS Deployment Time Significantly and Achieves CE+ Compliance with Endpoint Central

Galbraith LLP is a leading property consultancy known for its expertise in commercial and residential property sales, lettings, building consultancy, rural management, energy advice, and forestry. With 13 offices across Scotland and the north of England and approximately 200 employees and partners, Galbraith relies on advanced technology to support its operations and growth. The IT team, led by Justian Cross, manages a cloud-first estate with Windows 10 workstations and numerous SaaS platforms including O365, ensuring technology acts as a business enabler and helps achieve strategic goals.

Problem statement

• Vulnerable endpoints from patch delays
• Inefficient deployment and inventory management.
• Difficulties enforcing MDM and automation

Prior to implementing Endpoint Central, Galbraith LLP’s IT operations faced several persistent and labor-intensive challenges. The team struggled to ensure that devices across their distributed network—spanning 13 offices—remained consistently patched and updated, leaving gaps in security and risking non-compliance during audits. Application deployment processes were cumbersome and lacked automation, while maintaining a reliable and up-to-date asset inventory was increasingly difficult amidst business growth. Furthermore, the lack of a unified mobile device management platform hampered their ability to manage mobile endpoints securely and enforce data protection policies. Automated workstation builds were slow, often taking as long as 2.5 hours per device, significantly impacting IT resource allocation and delaying device readiness for end users. Collectively, these inefficiencies threatened productivity, compliance, and security across Galbraith’s entire IT estate.

The solution

Galbraith LLP evaluated alternatives like Microsoft Intune but selected Endpoint Central for its comprehensive and flexible feature set. Familiarity with Desktop Central’s usability helped speed up the rollout. The IT team followed ManageEngine guides to set up all available services, integrating Endpoint Central with Active Directory and automating agent deployment through Group Policy for seamless device management. The process was described as “fairly painless.” Critical features included vulnerability scanning, efficient patch deployment, automated OS imaging, and granular MDM policy enforcement, including secure mobile data wipe for lost devices.

Modules used

Mobile device management

OS deployment

Active Directory integration

Results

• OS deployment time cut from 2.5 hours to just 15 minutes per machine
• Improved audit readiness and rapid CE+ certification
• Real-time visibility into endpoint risks and vulnerabilities
• Granular mobile data control and policy enforcement; secure wipe for lost devices
• Bandwidth optimized for MPLS network

Why Endpoint Central was chosen over competitors?

Galbraith LLP chose Endpoint Central over competitors like Microsoft Intune because it offered a more comprehensive and flexible solution that aligned well with their IT requirements. Having prior experience with Desktop Central, they appreciated Endpoint Central’s faster configuration and rollout capabilities, which reduced deployment complexity and accelerated time-to-value. The seamless integration with their existing Active Directory environment and the ability to automate agent deployment through Group Policy were additional factors that made Endpoint Central the preferred choice. Overall, Endpoint Central provided them with a unified, easy-to-manage platform that enhanced visibility, security, and operational efficiency across their distributed IT estate.