Barnardo’s is a British charity founded by Thomas John Barnardo in 1866, to care for vulnerable children. It raises around £200 million each year running around 900 local services, and is the UK’s largest children’s charity, in terms of charitable expenditure.

Due to the situation with COVID-19 Barnardo’s were looking to pilot a remote desktop solution that allowed their staff to work from home. Due to Alscient’s expertise in this area we were approached directly by AWS and introduced to Barnardo’s to assist with this rollout.

The requirements were to:

• Design and provision a new and secure multi-account AWS infrastructure built to best practice with AWS Control Tower.
• Assist with the provisioning of Application Streaming Services with Amazon AppStream 2.0.
• Assist with the migration of existing WorkSpaces and AppStream images for continued development and testing.
• Design and implement a suitable network/VPN solution for integration with on-premise services.
• Implementation of Multi-Factor Authentication (MFA) services for user access to End User Compute (EUC) services.
• Help to define a suitable Windows Update policy for WorkSpaces.
• Assist with testing of EUC services.
• Provide SSO integration using Okta.

The end state solution needed to support over 1,000 users through a mixture of full WorkSpaces deployments and Appstream for those users who didn’t require a full desktop solution.  A legacy application was delivered through Amazon AppStream and the remaining apps were directly accessible through Amazon WorkSpaces. A site-to-site VPN connection and Transit Gateway was created between AWS and their own infrastructure to allow for connectivity to on-premise services. An AWS Lambda was also used and integrated with Active Directory to provision and terminate Amazon WorkSpaces. Additionally, AWS Control Tower was used to simplify ongoing AWS account management.

The project was delivered in three weeks. In the first week a series of workshops were held to obtain the full requirements and to create a design document for sign-off. The second week saw the solution being built out and a test plan being created. In the third week testing was completed and the system was handed over to Barnardo’s to UAT. Following go live, hyper care support was then provided by our ITIL certified managed service function.  

The system was delivered on time and too budget and allowed Barnardo’s staff to access core systems from their home environment. 

 A secure remote desktop solution was provided in the space of three weeks. This allowed for users to access a standardised build with a simple repeatable process for release upgrades. The solution supported access to services within Barnardo’s existing domain and provided a familiar Windows 10 look and feel. 

Alscient worked closely with Barnardo’s to deploy the most cost-effective mix of full Workspaces and Appstream resulting in approximately a 80:20 split in favour of Appstream resulting in a significant cost reduction on the originally planned deployment.  

Alscient provided an ongoing service to manage the estate and keep control of the cost base resulting in further savings for Barnardo’s on the overall running cost.