KDE Solutions
NLFREN

Endpoint management consultancy

We build workplaces that stay manageable, years after the rollout.

We design, build and migrate workplaces — Windows, macOS, mobile devices and virtual desktops — from small environments to several thousand devices. What we deliver is tested, documented and transferable, so your team can still work with it three years from now.

Book an assessment See what we do

What we work on

  • Management with Intune
  • Virtual desktops
  • Endpoint security & compliance
  • Identity
  • ConfigMgr & co-management
  • Servers & network
  • Applications & update management

How we work together

  • Assessments & advice
  • Projects
  • Staffing
View all services

Every assignment is different

One assignment is a half-day question, the next is a migration that runs for a year. A second opinion on a quote, an environment that needs straightening out, or someone sitting with your team two days a week.

What we do, we explain. Every policy, every script and every choice is documented and walked through with whoever picks it up on your side. That takes longer than quietly doing it ourselves, and it is the only way you will not need us afterwards.

Not every problem is technical. Sometimes the cause sits in how requests come in, who gets to decide what, or how a rollout is organised. We work on that too: mapping a process, sharpening the agreements, setting up a way of working that holds once we are gone.

We do not change what is not broken. An environment that has run for years deserves to be understood first and altered second. Sometimes the conclusion is that most of it can stay and three things need attention.

Experience

Situations we have met before

An environment that grew over time

Hundreds of policies, packages without an owner and documentation that stopped somewhere in 2019. We bring it back to something you can explain — and keep that way.

A migration that stalls

One application that refuses, a pilot group that complains, a deadline closing in. The fix is usually in the order of the steps, not in more hands.

A roadmap that does not exist yet

You know something has to happen — a rollout that is dragging, a tenant that needs cleaning up, policy that no longer fits — but not in which order, on what budget or with what impact. A roadmap exercise lays it out: what comes first, what can wait, and what each piece costs in time and money.

A project on the horizon?

Tell us briefly what it concerns. We will set up an introductory call and work out the right approach from there.

Get in touch

Services

What we do

From a few days of assessment to a migration that runs for a year. Which parts you need differs from one organisation to the next.

What we work on

Management with Intune

The design and setup of cloud management: which policies exist, how they are grouped and who is allowed to do what.

  • Setting up a new tenant, or cleaning up an existing one
  • Policy that stays traceable: naming, groups and assignment
  • Enrolment of new devices: what happens between unboxing and first sign-in
  • macOS through Apple Business Manager, including FileVault keys and scripts where policy falls short
  • Keeping company data separate on personal phones without managing the whole device

Virtual desktops

When a physical device does not fit: virtual desktops in the cloud or on your own infrastructure.

  • Windows 365, Azure Virtual Desktop or an existing VDI environment
  • Image management, assignment and scaling
  • Access for externals and temporary staff
  • Cost comparison against a physical device
  • Integration with existing endpoint management

Endpoint security & compliance

Policy that is enforceable, and that you can demonstrate.

  • Defender for Endpoint and security baselines
  • BitLocker, LAPS and attack surface reduction
  • Patch and vulnerability follow-up
  • Reporting for audits, NIS2 and insurers

Identity

Who is who, who may do what, and how that stays correct as people come and go.

  • Active Directory and Entra ID, including the hybrid link between them
  • PKI and certificate management
  • Identity governance: roles, access reviews and lifecycle
  • Guest access and working with externals

ConfigMgr & co-management

Keeping existing ConfigMgr environments healthy — or winding them down in a controlled way.

  • Enabling co-management and shifting workloads
  • Migration path to cloud-native management
  • Cleaning up collections, packages and task sequences
  • Hybrid scenarios for devices that are not cloud-ready yet

Servers & network

What still runs on your own infrastructure, and the connection to it.

  • Windows and Linux servers: setup, migration and maintenance
  • Network, firewall and wifi
  • Backup and recovery, with a restore test actually carried out
  • Monitoring and patching
  • Azure: what moves to the cloud and what is better left where it is

Applications & update management

The application estate under control: what is installed, how it gets onto the device and when it is updated.

  • Packaging and silent installs (Win32, MSIX, PSADT)
  • Application inventory: what still runs, who uses it, who owns it
  • Feature updates in rings, without a department grinding to a halt
  • What to do with devices still on an old build or old hardware

How we work together

Assessments & advice

An independent look at what you are running today.

  • Health check of tenant, policies and packaging
  • Roadmap with priorities and cost estimate
  • Second opinion on a project in flight
  • Licensing advice: Business Premium, E3, E5

Projects

A scoped engagement we design and carry out, with a delivery and a handover.

  • From proposal to delivery, with a single point of contact
  • Fixed price where the scope allows it
  • Progress reported along the way, no surprises at the end
  • Documentation and handover at closing

Staffing

Someone from our side works alongside your people for a while, with the responsibility that comes with it.

  • Reinforcement during a migration or a busy period
  • Filling an open role for the time being
  • Coaching your people at the points where they get stuck
  • Backing up technical choices towards management or a supplier

Not sure which service fits?

Tell us what is going on. In a first conversation we work out together whether an assessment, a project or a few days of advice is the right start.

Get in touch

Working together

What you can expect

The practical side: how we start, what you see along the way, how we invoice and what happens at handover.

How an assignment starts

A conversation, usually at your site. Then a proposal of three pages at most: what we do, what it delivers, when it can be ready and what it costs.

Who turns up

The same consultant from start to finish. You know in advance who is coming, and you are not talking to an account manager who passes the work on.

How you are kept posted

A fixed check-in and a short written status. If something deviates from the plan, you hear it when it happens, not at delivery.

Pricing

Fixed price for scoped work, day rate for advice and staffing. Extra work is discussed and approved beforehand.

What is yours

Scripts, policies, packages and documentation live in your own tenant and repository. Everything we make is yours.

Access

We work with named accounts of our own and ask only for the rights the assignment needs. At closing you get a list of everything you can revoke.

At handover

A handover session with the people who have to carry on, and documentation they can read without us. After that we stay reachable for questions.

No dependency

We build with mainstream technology and document it so your team or another party can carry on tomorrow.

About

Who we are

KDE Solutions has been around since 2013. A small team of consultants focused on the workplace.

Where we come from

Our consultants did not start in architecture. They come from the service desk, second line and system administration — where you find out what a decision on paper does in practice.

That still shapes how we look at an environment. Someone who took the calls when a rollout went wrong designs differently from someone who only draws the diagram.

KDE Solutions has been around since 2013. We started on our own because at large integrators a lot of energy goes into selling and too little into the work itself. Here it is about projects that solve something — not about what happens to be on the price list.

The team

A handful of specialised consultants. Small enough to know what is going on at every client.

Certifications

Over twenty Microsoft certifications across the team. Kept current because the field changes, not to display a logo.

Where we work

From Belgium. Remote where it can be, on site where it must be.

Who we work for

From organisations with thirty devices to estates of several thousand endpoints, with or without an IT team of their own.

Shall we meet?

A first conversation to see whether it clicks and whether we can be of use to each other.

Get in touch

Contact

How to reach us

Tell us briefly what it concerns — a migration, an assessment or extra capacity. We will get back to you quickly to set up an introductory call.

Emailinfo@kdesolutions.be
Phone+32 (0)0 000 00 00
Address

Helstraat 21
3400 Landen
België

Availability

Monday to Friday, 8.30 – 17.30

Company number

BE 0537.183.426

Thanks, your message has been sent. You will hear from us shortly.

Sending failed. Send it from your own mail app, or write to info@kdesolutions.be.

We use your details only to answer your question. See the privacy policy.

Legal

Privacy policy

What this website collects, why, how long it is kept and what you can do about it.

What this notice covers

KDE Solutions BV, Helstraat 21, 3400 Landen, Belgium, company number BE 0537.183.426, is the controller for the data collected through this website. This notice covers this website only. What happens to data during an assignment is set out in the agreement with the client. Questions about this policy can go to info@kdesolutions.be.

What data

Only what you enter in the contact form yourself: your name, organisation, e-mail address, the subject you picked and the content of your message. If the exchange continues, the only addition is what you share yourself, such as a phone number or a role. We ask for nothing more.

Why and on what basis

To answer your question and, if it comes to that, to prepare a proposal. These are pre-contractual steps taken at your request. We send no newsletters, build no profiles and make no automated decisions.

How long

A request that does not lead to an assignment is kept for two years at most, so we know what it was about if you get back in touch. If it does lead to an assignment, the exchange moves into the client file and the periods in the agreement apply.

Who else sees your message

  • Cloudflare, Inc. (United States) — hosts this website, handles the submitted form and provides the visit statistics.
  • Microsoft Corporation — provides the mailbox your message arrives in.
  • Anthropic PBC (United States) — provides the AI assistant we use to help follow up on incoming messages.
  • Google Ireland Limited — provides this site's typefaces; your browser fetches them from Google directly, which lets Google see your IP address.

Transfers outside the European Economic Area rely on the European Commission's standard contractual clauses. We do not sell data and do not pass it on for advertising.

Cookies

This website sets no cookies. Your language choice is stored locally in your browser and never leaves your device. For visit statistics we use Cloudflare Web Analytics: no cookies, no recognition of individual visitors. We see how often a page was viewed, which site people came from and which country, not who you are. No cookie banner is therefore needed; should that ever change, we will ask for your consent first.

Your rights

You have the right to access, correct, erase, restrict and port your data, and to object to processing. An e-mail is enough. If our answer does not satisfy you, you can lodge a complaint with the Belgian Data Protection Authority, Drukpersstraat 35, 1000 Brussels.

Security and changes

We take reasonable technical and organisational measures to protect your data. This policy may change; the version in force is always on this page.

Last updated: October 2026.

Legal

Terms and conditions

The rules that apply to our quotations and assignments, unless we agree otherwise in writing.

Scope

These terms apply to all quotations and assignments of KDE Solutions BV, Helstraat 21, 3400 Landen, company number BE 0537.183.426 (“we”), unless agreed otherwise in writing. A client's purchasing conditions do not apply, not even when supplied later.

Quotation and agreement

A quotation is valid for thirty days. The agreement comes into being on written acceptance or when the work actually starts.

Performance

We carry out the assignment as a best-efforts obligation, with the care of a professional. The client provides access, accounts, test devices and information in good time. Delays arising from this shift the planning.

Changes to the assignment

Work outside the agreed description is discussed first and only carried out after approval, at the current day rate or for a new fixed price.

Rates and invoicing

Scoped work is done for a fixed price; advice and staffing at a day rate. Prices exclude VAT. Travel and any accommodation costs are agreed in the quotation. Invoices are payable within thirty days.

Late payment

If payment is not made on the due date, statutory late-payment interest is due by operation of law and without notice of default, increased by the fixed compensation provided for in the Belgian act of 2 August 2002.

Term and termination

Time-and-materials and staffing assignments may be ended by either party with thirty calendar days' notice. Work already performed remains payable.

Intellectual property

Scripts, configurations and documentation made specifically for the client transfer to the client after payment in full. Our own methods, templates and general knowledge remain ours and we may keep using them.

Confidentiality

What we see and hear at the client stays confidential, also after the assignment ends. The client treats our documentation and rates the same way.

Liability

Our liability is limited to the amount invoiced for the assignment concerned. We are not liable for indirect damage, loss of data or loss of profit. The client remains responsible for working backups.

Force majeure

Events beyond our reasonable control suspend obligations for as long as they last, without any right to compensation.

Non-solicitation

During the assignment and for twelve months afterwards, the client does not hire our staff or subcontractors without prior written consent.

Governing law

Belgian law governs these terms. Disputes fall within the jurisdiction of the courts of the Leuven district.

Version October 2026.