Legacy Infrastructure Modernisation: From SBS to a Resilient, Virtualised Environment

Challenge

The firm was running its entire operation on an ageing Windows Small Business Server (SBS), paired with a separate physical terminal server. Both systems were well past their supported lifecycle, creating significant operational risk for the business:

• End-of-Life SBS Vulnerabilities: End-of-life SBS platform with no vendor security patching, leaving the business exposed to modern threats.
• Single Point of Failure: Core services (file storage, email, authentication, and application hosting) all sat on one physical box with no redundancy.
• Duplicated Physical Hardware: A separate, ageing terminal server adding management overhead and duplicating infrastructure that could be consolidated.
• Unreliable On-Premises Mail: An on-premises email environment that was increasingly difficult to secure, back up, and access reliably from outside the office.
• Outdated Communications: An outdated, unsupported PBX-style phone system with limited flexibility for remote and mobile staff.
• Under-Protected Perimeter: A legacy firewall lacking modern threat protection, intrusion prevention, or centralised visibility — leaving the network perimeter exposed.

Beyond the technical debt, the client needed the transition to happen with minimal disruption to day-to-day operations, while laying a foundation that could scale as the business grew.

Approach

Kinesis Cloud designed and delivered a staged modernisation programme, replacing fragile single-purpose hardware with a consolidated, virtualised on-premises environment, while extending email and communications into the cloud where it added the most value.

Server & Infrastructure Modernisation

• Decommission Legacy Hardware: Decommissioned the legacy SBS server and standalone terminal server.
• Consolidated Virtualised Host: Deployed a single, modern physical host running Windows Server 2019 with three virtual machines, separating core roles (e.g. domain, file, print services, line of business application, and terminal services) to improve resilience, patching flexibility, and recoverability — all on premises.
• Seamless Cutover: Migrated data, user profiles, and line-of-business configuration across with a planned cutover to minimise downtime.
• Business Continuity & Disaster Recovery: Implemented a Business Continuity and Disaster Recovery (BCDR) solution to protect the new virtualised environment, reducing the risk of server downtime and data loss.

Email Modernisation

• Microsoft 365 Mail Migration: Migrated mailboxes from the on-premises environment to Microsoft 365.
• Hybrid Identity & Phased Cutover: Implemented a hybrid configuration to allow a controlled, phased cutover and continued interoperability between on-premises identity and the cloud mail platform.
• Enhanced Mail Security: Improved email security, availability, and remote access as part of the same effort.

Unified Communications

• Cloud-Hosted 3CX PBX: Replaced incumbent managed phone system with a 3CX PBX hosted in the cloud.
• Cost & Reliability Optimisation: Gave staff a reliable, modern phone system while reducing ongoing call costs and hosting charges compared to the managed phone system setup.

Network Security Uplift

• UTM Appliance Deployment: Replaced the client's legacy firewall with a modern Unified Threat Management (UTM) appliance.
• Next-Generation Protection: Enabled next-generation protections including intrusion prevention, content/threat filtering, and centralised policy management to secure the new hybrid environment.

Outcomes

• Eliminated End-of-Life Infrastructure Risk: Retired the SBS and terminal servers, replacing them with a single, supported Server 2019 host running a virtualised, on-premises environment.
• Improved Resilience & Flexibility: Consolidated two ageing physical servers onto one modern host running three VMs, reducing the impact of any single component failure and simplifying future maintenance and scaling.
• Modernised Hybrid Email: Migrated email to Microsoft 365 in a hybrid configuration, improving security, reliability, and anywhere-access for staff, while enabling a smooth, low-risk transition.
• Cloud-Hosted Phone System: Delivered a flexible, cloud-hosted phone system (3CX) that supports remote and mobile working.
• Strengthened Security Posture: Installed a modern UTM firewall, giving the client significantly improved protection against current network-based threats and better visibility over network activity.
• Foundation for Cloud Scale: Positioned the business on a modern, supportable platform, reducing ongoing operational risk and providing a foundation for future cloud adoption.

Kinesis Cloud — Modernising infrastructure, identity, and security for organisations that can't afford downtime.