Collaboration context
Comprehensive modernisation of a secondary school IT environment
SSOŠ VIA HUMANA is a secondary school where the IT environment had to be handled as one connected whole. School IT is not only computers in classrooms, but also the network, Wi-Fi connectivity, user accounts, servers, NAS storage, security rules, camera system, video intercom, electrical installations and everyday technical support.
The goal was to gradually build a more stable, secure and better manageable IT environment that supports teaching, school administration, PC classroom operation, wireless connectivity, device management and the building’s technical systems.
The solution included network administration, Microsoft 365, Microsoft Intune, local servers, NAS, firewall, switches, network segmentation, Wi-Fi infrastructure, new or modernised PC classrooms, camera system, video intercom, electrical installation work and computer management and service.
Initial state
Inconsistent network, weak security and frequent outages
Before the implementation, the school IT environment was unclear and technically unsystematic. The network was not sufficiently controlled, a firewall was missing, central network and device management did not exist and Microsoft 365 was not used as a central platform for managing users, accounts and devices.
Wi-Fi coverage was weak and the network elements did not allow the required level of management. The network was not segmented according to different types of operation, which complicated security, clarity and administration of the school environment. The school also did not have a camera system and the overall security needed significant strengthening.
The environment was prone to outages and technical issues that could negatively affect teaching, administration and everyday school operation.
- Unclear and harder-to-manage network infrastructure.
- Missing firewall as a central security element.
- Missing central network and device management.
- Microsoft 365 was not used as a central management platform.
- Weak Wi-Fi coverage in school premises.
- Unmanaged network elements.
- Missing network segmentation through VLAN.
- Missing camera system.
- Weak or insufficient security.
- Outages and lower operational stability.
Solution goal
Build a stable, secure and centrally managed school IT environment
The goal was to comprehensively modernise, stabilise and secure the school IT environment. The solution had to support everyday teaching, PC classroom operation, administration, user management, device management, Wi-Fi connectivity, server and data services, camera system, video intercom and other technical parts of the school.
It was important to create an environment that would not depend on chaotic or isolated management of individual elements. Network, accounts, devices, servers, NAS, Wi-Fi and security rules had to be handled as a connected system with clearer management, better control and higher operational stability.
- Stabilise and make the school network clearer.
- Introduce firewall and security rules.
- Segment the network according to operation and device types.
- Improve Wi-Fi coverage and wireless network management.
- Introduce or expand Microsoft 365 management.
- Introduce device management through Microsoft Intune.
- Manage local servers and NAS storage.
- Build new or modernised PC classrooms.
- Ensure computer management and service.
- Build a camera system and video intercom.
- Carry out required cabling and electrical installation work.
- Increase cybersecurity of users, accounts, devices and network.
- Reduce outages and technical problems.
Solution design
Connecting network, Microsoft services, security, classrooms and technical systems
The solution was designed as comprehensive modernisation of the school IT environment. It included network administration, firewall, switches, Wi-Fi infrastructure, VLAN segmentation, local servers, NAS storage, Microsoft 365, Microsoft Intune, PC classrooms, camera system, video intercom, electrical installations and endpoint device service.
The design focused on stable teaching, reliable operation of school systems, better user and device management, higher security and easier operational control over the whole IT environment.
The network was designed so that individual parts of the school environment were logically separated according to their purpose. Microsoft 365 and Microsoft Intune were used for better account, device and security policy management. The solution also included backup of important parts of the IT environment without publishing sensitive technical details.
Implementation process
From stabilisation to operational management of school IT
Analysis and stabilisation of the IT environment
Mapping the initial state of the network, Wi-Fi, server environment, user accounts, endpoint devices, classrooms and technical systems of the school. Identification of weak points, outages and areas that needed modernisation or security improvements.
Network, Microsoft 365, Intune and security
Configuration of firewall, switches, network segmentation, Wi-Fi infrastructure, Microsoft 365, Microsoft Intune, user, account, device and security policy management. This also included strengthening cybersecurity and access management.
Classrooms, technical systems and operational management
Building or modernising PC classrooms, computer management and service, work with local servers and NAS storage, camera system, video intercom, cabling, electrical installations and technical infrastructure needed for everyday school operation.
What we delivered
Key areas of school IT modernisation and management
Network administration, firewall and switches
The implementation included administration and modernisation of the school network infrastructure. Firewall setup, switch configuration, network clarification and creation of a more manageable network environment were handled.
The firewall was deployed as an important security element that helps control network communication, increase control over operation and support secure separation of individual parts of the school environment.
Network segmentation through VLAN
The network was designed so that individual parts of the school environment were logically separated according to their purpose. Network segmentation helped separate administration, classrooms, Wi-Fi networks, server and data services, camera system, video intercom and other technical devices.
The result is a clearer, safer and better manageable network infrastructure without publishing sensitive technical details.
Wi-Fi infrastructure
Wi-Fi infrastructure was designed and managed to support different types of use in the school environment. The solution accounted for connectivity for staff, students, classrooms, administration, guests and other operational needs of the school.
The emphasis was on connection stability, secure separation of different operation types and better wireless network management.
Microsoft 365 and school accounts
Microsoft 365 was used as a platform for managing school accounts, users and selected school services. The solution included management of user accounts, permissions, security rules and access.
The goal was to unify user management and create a safer foundation for using school digital services.
Microsoft Intune and device management
Microsoft Intune was used for central device management and support of security rules for endpoint devices. The solution helped improve control over devices used in the school environment and simplify their administration.
This makes it possible to better manage configurations, security settings and device use within the school.
Local servers and NAS
The solution included management of the local server environment and NAS storage. These elements are an important part of the school’s technical background and support selected operational, data or internal services.
The solution was formulated so that the server and data environment fits into the overall school architecture and is more manageable, secure and operationally stable.
Backup of important parts of the IT environment
The solution also included setup or management of backups for important parts of the school IT environment. The goal was to increase operational certainty and the school’s readiness for technical incidents.
The reference intentionally remains at a general level and does not publish sensitive details of the backup solution.
PC classrooms, computers and equipment service
As part of the implementation, PC classrooms were built or modernised and computer management and service were provided. The goal was to support teaching, improve technology availability and reduce technical issues during everyday use.
Endpoint device management included preparation, service and operational support for computers used in teaching, administration and other parts of the school.
Camera system and video intercom
The solution also included building technical systems, especially the camera system and video intercom. These elements help improve visibility across the school environment and support safer building operation.
The solution was integrated into the overall technical and network environment of the school without publishing sensitive wiring or configuration details.
Cabling and electrical installations
Cabling and electrical installation work needed for new or modernised parts of the school was also carried out. This mainly concerned PC classrooms, network elements, Wi-Fi infrastructure, camera system, video intercom and other technical parts of the school environment.
The goal was to create the physical foundation for stable operation of the school’s IT and technical systems.
Solution security
A safer network, accounts, devices and technical systems for the school
Security was one of the key parts of the whole implementation. In a school environment, it is necessary to protect not only administration, but also classrooms, student access, staff accounts, devices, server services, Wi-Fi networks and building technical systems.
The implementation mainly covered these areas:
- Firewall as the central security element of the network.
- Network segmentation through VLAN.
- Separation of different operation and device types.
- Security measures in Microsoft 365.
- Management of user and school accounts.
- Multi-factor authentication MFA.
- Login and access rules.
- Permission management.
- Microsoft Intune and security policies for devices.
- Better control over access to school services.
- Safer Wi-Fi infrastructure.
- Monitoring and management of technical parts of the environment.
- Backup of important parts of the IT environment.
Security measures were designed to strengthen protection of accounts, devices, network and school systems without publishing sensitive technical details.
Results
A more stable, secure and better manageable school IT environment
The result was a significantly more stable, secure and better manageable school IT environment. SSOŠ VIA HUMANA gained a clearer network, better Wi-Fi coverage, modernised or new PC classrooms, central user and device management, a safer network through firewall and segmentation, Microsoft 365 and Microsoft Intune management, local server and NAS management, camera system, video intercom and better technical background for teaching and administration.
The implementation contributed to reducing outages, faster computer service and better operational control over the school IT environment.
- More stable and clearer network.
- Better Wi-Fi coverage.
- Modernised or new PC classrooms.
- Central user and device management.
- Microsoft 365 as the foundation for account and service management.
- Microsoft Intune for device management.
- Safer network through firewall and segmentation.
- Local server and NAS management.
- Backup of important parts of the IT environment.
- Camera system and video intercom.
- Computer management and service.
- Fewer outages and faster technical support.
- Better digital and technical background for the school.
Main benefits for the client
What the solution brought to SSOŠ VIA HUMANA
The implementation brought the school an overall improvement of its digital and technical background. The IT environment became more stable, secure, better manageable and more suitable for everyday teaching, administration and operation of building technical systems.
More stable teaching with fewer technical problems.
Safer and better manageable network.
More modern PC classrooms.
Better Wi-Fi coverage.
Central management of users, accounts and devices.
Higher level of cybersecurity.
Better management of local servers and NAS.
Building technical systems integrated into the overall solution.
Camera system and video intercom as part of safer operation.
Faster service and better operational control over the IT environment.
More comprehensive digital background for the school.
Summary
Comprehensive IT solution for a modern school environment
For SSOŠ VIA HUMANA, comprehensive modernisation, management and security of the school IT environment was delivered. The solution included network administration, Microsoft 365, Microsoft Intune, local servers, NAS, firewall, switches, network segmentation, Wi-Fi infrastructure, PC classrooms, camera system, video intercom, electrical installations and computer management and service.
The result is a more stable, secure and better manageable school IT environment that supports everyday teaching, administration, building technical systems and further development of the school’s digital background.
