All success stories
Modern Workspace
Suez International

Suez Unifies Windows and Mac With Intune

BITSUMMIT delivered managed Intune and Jamf services for Suez International, unifying Windows and macOS device management across regions with strong compliance and lower IT overhead.

Industry
Environmental Services
Service line
Managed Services
Timeline
Ongoing
Suez Unifies Windows and Mac With Intune
98
%
Device compliance across the fleet
40
%
Reduction in security incidents
25
%
Reduction in IT overhead

The challenge

Suez International runs across multiple regions with thousands of employees, and its Windows and macOS devices were managed in a decentralized way that no longer held up. Software updates, security patching, and compliance enforcement were inconsistent from one place to the next, and supporting users across different regions and platforms was slow and inefficient.

What Suez needed was a single way to manage the entire fleet, with consistent security across every device and the room to scale. It had to streamline IT operations, automate the routine work, and guarantee that every device, wherever it sat and whatever it ran, met corporate security policy.

Our approach

BITSUMMIT brought Suez's Windows and macOS fleet under one managed service, using the right tool for each platform rather than forcing both onto one: Microsoft Intune for Windows, Jamf for macOS, and a single operational view across the two.

Suez unified endpoint management: Windows devices managed in Microsoft Intune and Mac devices in Jamf feeding one console with a shared policy baseline, with Conditional Access admitting only compliant devices to corporate resources, designed by BITSUMMIT

One pane of glass across Windows and Mac

BITSUMMIT deployed and configured Intune to manage the entire Windows estate, standing up automated enrollment, security-policy delivery, and patch management, and deployed Jamf to give the macOS estate the same level of control, security, and compliance. Both feed a unified dashboard, so IT can see compliance status, push updates, and manage configurations for every device from one place, regardless of platform or region.

Consistent security policy, enforced automatically

Standardized compliance policies were applied across both platforms, covering encryption, password requirements, and device health checks, so a Mac in one region and a PC in another are held to the same baseline. Automated patch schedules keep devices current against new vulnerabilities, and Intune Conditional Access ties it together by allowing only compliant, healthy devices to reach corporate resources.

Faster onboarding, less manual work

Enrollment was automated so new devices configure themselves with minimal IT involvement and staff are productive sooner. Behind that, BITSUMMIT runs 24/7 monitoring and proactive support, resolving device issues before they interrupt the business.

Visibility and audit built in

Reporting dashboards give Suez's IT team real-time insight into compliance, vulnerabilities, and update status so they can act the moment something drifts, and regular compliance audits confirm the fleet continues to meet Suez's global security requirements.

The outcome

Suez now manages every Windows and Mac device through a single service, which collapsed the complexity of running two platforms across multiple regions into one consistent operation.

The security gains are measurable. Automated enforcement and patching pushed the fleet to a 98% compliance rate, and Conditional Access combined with automated patching cut security incidents tied to unpatched or non-compliant devices by 40%. Because enrollment, patching, and policy updates now run automatically, the IT team spends 25% less time on routine device work, and the same model scales to new devices and users as Suez grows, without adding headcount.

One console for every Windows and Mac device across regions - 98% compliance, 40% fewer security incidents, and 25% less IT overhead for Suez.
BITSUMMIT

Your story could be the next one.

Tell us what you're trying to modernize, secure or migrate. We'll bring a plan and a named senior engineer.

Schedule a call