Case Study – Modernizing a Multi-Site Business with Entra ID, SharePoint, OneDrive, and Intune

Farmhouse Networking helped a local MSP migrate a 30-user, multi-site client from on-prem Active Directory and Synology-hosted file shares to a cloud-first Microsoft 365 environment built on Entra ID, SharePoint, OneDrive, and Intune. The result was a simpler, more secure, and more flexible workplace that supports remote work and reduces dependence on VPN and on-site infrastructure. Microsoft’s conditional access and Intune-based compliance model also aligns with a zero-trust approach for protecting cloud access.

The Challenge

The client was operating with Synology devices at both main sites, Synology Directory Server, Sophos site-to-site VPN, and Group Policy-based printer and drive mapping. That setup worked for an on-premises workforce, but it no longer matched how the business needed to operate. As employees moved to laptops and a work-from-anywhere model, remote access to file shares became cumbersome and users sometimes saved files locally to avoid VPN friction. Microsoft 365 Business Premium is commonly used to support this type of shift because it includes Intune, Conditional Access, and the Microsoft 365 apps needed for cloud-managed endpoints.

The Solution

The project moved the client to a cloud-native environment using Entra ID, SharePoint, OneDrive, and Microsoft Intune with Business Premium licensing. File data totaling 1.5 TB was migrated using Synology Cloud Sync, which supports synchronization between a Synology NAS and cloud services such as Microsoft 365 storage services. Identity was handled as a cutover rather than a hybrid transition, which simplified the move and aligned with the client’s decision to leave behind the overhead of local Active Directory management.

Security and Device Management

To improve access control, the environment was set up with MFA through Microsoft Authenticator and Conditional Access policies tied to device health. Intune was used for app deployment, including Adobe Acrobat and Microsoft 365 Apps, while Conditional Access controlled access to Outlook and other cloud services based on compliance requirements. Microsoft documents that Conditional Access works with Intune compliance to ensure syncing and access are limited to compliant devices, which is the foundation for the device-based protections used in this project.

SharePoint Structure

After migration, the data was reorganized into top-level folder structures to keep permissions simple and manageable. This approach reduced complexity while still preserving secure access across the business. The end result was a cleaner cloud file structure that was easier for both users and the MSP to support.

Results

The migration was completed in about three months and removed the need for expensive VPN hardware and the ongoing overhead of local AD and GPO maintenance. Users gained native access to their files from anywhere, and the Microsoft ecosystem made sign-in and daily workflows simpler through SSO. The MSP also benefited from shorter deployment timelines for new devices and less manual work during onboarding.

Client Quote

Here is a quote option you can use with client approval:

“Farmhouse Networking helped us move from a complicated on-site setup to a modern Microsoft 365 environment without disrupting our team. File access is simpler, security is stronger, and our users can work from anywhere with far less friction.”