IT infrastructure

Migrations, backups and disaster recovery.

I look after infrastructure that has to keep working: servers, domains, backups and networks. I also take on the hard jobs, such as migrating an entire environment without downtime or rebuilding after a ransomware attack. Every stage has a rollback plan, and every project ends with documentation.

01

Data centre migrations without downtime

Moving whole environments to new platforms and system versions in stages, while users keep working.

  • Migrations from VMware to Proxmox VE and Hyper-V (V2V)
  • Hyper-V clusters with Storage Spaces Direct
  • Replacing domain controllers and raising the forest functional level
  • Consolidating AD domains and forests (ADMT, SID History)
  • SQL Server migrations with a minimal cut-over window
02

Disaster recovery and backups

A plan for losing the entire server room, proven by a recovery test.

  • Business impact analysis (BIA) and RTO and RPO targets
  • Continuous replication to a second site (CDP)
  • Automated failover and failback plans
  • Immutable backups in a 3‑2‑1‑1‑0 strategy
  • Recovery tests in an isolated network
03

Recovery after a ransomware attack

Getting back to work quickly and removing the cause, so the attack does not happen again.

  • Isolating segments and analysing IOCs
  • Finding the entry vector
  • Recovering the AD forest in a clean room
  • Restoring data from immutable and air-gapped backups
  • Hardening AD after the incident (tiered model, LAPS)
04

High availability for critical systems

A failed server, storage array or link does not stop the ERP or line-of-business systems.

  • Windows Server failover clusters
  • SQL Server Always On availability groups
  • Application load balancing
  • FortiGate firewall HA clusters
  • Redundant links and SD-WAN
05

Networks and perimeter security

Secure connections between sites and a network divided so that an incident cannot spread across the whole organisation.

  • FortiGate and FortiAnalyzer
  • Site-to-site IPsec VPN
  • Network segmentation and micro-segmentation
  • 802.1X device authentication
  • Enterprise-grade Wi-Fi
06

Hardware and licences

Choosing and supplying what is really needed, with offers prepared for public procurement.

  • Servers, storage arrays and workstations
  • Network equipment
  • Microsoft, Veeam and Fortinet licences
  • Renewals and vendor support

When to get in touch

A few typical situations and what I do about them.

“We still have servers running Windows Server 2012 or 2016.”

Version 2012 has not received security updates since October 2023, and 2016 loses them on 12 January 2027. I move roles, the domain and databases to a newer version in stages, so users do not notice the change.

“Our VMware renewal came in much higher than before.”

After Broadcom acquired VMware, perpetual licences were replaced with bundled subscriptions, and for many organisations the cost rose sharply. I work out what moving to Proxmox VE or Hyper-V would cost and help choose what suits the organisation: Proxmox has no licence fees, and Hyper-V is included in the Windows Server licence. Then I move the virtual machines along with their backups.

“We do have backups, but nobody has checked whether we can restore from them.”

I run a test restore in an isolated environment and measure how long it really takes to get back to work. If needed, I add immutable backups that withstand ransomware.

“Computers, servers and printers are all on one network.”

I divide the network into segments (VLANs) and set firewall rules so that an infected computer cannot reach the servers. I plan the work so that the office or company does not have to stop.

“Something has failed: a storage array, the domain or a server that won't boot.”

I diagnose the problem, restore data and services, then write down the cause and what to do so it does not happen again.

What I work with

Systems and hardware I know from day-to-day work with clients.

Virtualisation

  • Hyper-Vvirtualisation in Windows environments, including clusters with Storage Spaces Direct
  • Proxmox VEopen-source virtualisation with no licence fees, a common choice after leaving VMware
  • VMware vSpheremaintaining existing environments and migrating away from VMware

Systems and services

  • Windows Serverversions 2012 to 2025: deployments, upgrades and migrations
  • Active Directorydomain design, repair and migration, FSMO roles
  • SQL Serverdatabase migrations and high availability with Always On groups

Backups

  • Veeamvirtual machine backup and replication: licensing, configuration, recovery tests
  • Synologybackup repositories and NAS storage, recovery after failures

Networks and security

  • FortiGatefirewalls, site-to-site IPsec VPN, high-availability clusters
  • FortiAnalyzerfirewall logs and reports, the basis for incident analysis
  • UniFioffice Wi-Fi networks and switches

Documentation after every project

I write down what I have done so that the next administrator, an auditor or an inspection can work with it.

  • Current state reportInventory and risks before we start
  • Migration and rollback planStages, maintenance windows, cut-over criteria
  • Handover documentationConfiguration, diagrams, procedures
  • Recovery test reportMeasured RTO and RPO, conclusions

Planning a migration or need a plan for when things fail?

Let's start with a review of what you have. After that it is clear what the risks are and where to begin.

Book a call