Strategic support for cloud transformations in enterprises, KRITIS operators and public authorities. Focus on Microsoft Azure, AWS, Microsoft 365 and hybrid architectures with Schrems-II compliance.
The five most recent articles authored by Thomas Joos on this topic – straight from trade publications.
Automating server configuration, software deployment and infrastructure management. Declarative approach for Linux and Windows, reproducible processes without manual intervention, viable for SMEs too.
Shift from driver-centred to protocol-based model. Microsoft IPP Class Driver on Mopria basis replaces classic Win32 installers.
Three flavours of sovereign cloud models. EU-US Data Privacy Framework, encryption with external key management, restrictive access paths.
Management, security and compliance in a cloud console. Licensing models and practical onboarding for Windows, Apple and BYOD devices. Response times and sovereignty question.
ABAP platform as central processing layer. TLS- and SNC-protected communication channels. Certificate management as a fundamental operations task.
A brief overview of the most common engagement types. Concrete contents remain confidential – described is only the activity.
Data flows, identity strategies and compliance requirements for hybrid and full cloud migrations.
Comparison of AWS, Google and Microsoft Sovereign Cloud offerings against the backdrop of Schrems II and the EU-US Data Privacy Framework.
Intune, Unified Endpoint Management, BYOD strategies and dealing with the approaching ESU end of Windows 10.
Azure Arc, Azure Monitor and unified telemetry between on-premise data centre and cloud – consolidated control without workload relocation.
I combine architecture know-how across Microsoft Azure, AWS and Microsoft 365 with hands-on experience from ongoing cloud migrations for enterprise clients and KRITIS operators.
The Microsoft practice is backed by certifications, among them Microsoft Certified Systems Engineer and Systems Administrator from many years of work with the Microsoft stack.
Existing servers, Active Directory, Exchange and file services in your own data center.
Gradual connection to Azure and Microsoft 365. Identities, mailboxes and workloads run in parallel.
Workloads in Azure and AWS, managed with Azure Arc, secured and without lock-in to a single vendor.
Hybrid architectures between on-premises and cloud, focused on the Microsoft stack. Schrems-II-compliant designs for corporations that need to keep personal data in Europe.
Migration of Exchange on-premises to Microsoft 365 and Exchange Online. Architecture design for hybrid Microsoft 365 environments with several thousand mailboxes, plus Azure workloads and SharePoint modernisation.
„Within the scope of our global migration project, we came to know Mr Thomas Joos as a highly competent, reliable and methodically rigorous partner. In this complex project, more than 3000 mailboxes in numerous countries were migrated to several centrally operated Exchange servers."
Active Directory hardening, identity and access management, multi-cloud networks. Building resilient structures for corporations, KRITIS operators and public authorities.
Cloud compliance under Schrems-II and GDPR conditions. Assessment of data residency and the contractual constructs between hyperscalers and EU subsidiaries.
„When migrating our hybrid Exchange environment to Microsoft 365, Mr Joos did not just deliver the technical concept. Equally important for us was that he clearly worked out the regulatory implications of Schrems-II for our cloud architecture. The combination of both levels was decisive for us."
Migration of Exchange, Active Directory and endpoints to the cloud without lock-in to a single vendor.
Neutral assessment of sovereign cloud options and architecture decisions before major investments.
Backup, primary storage and AI stack as separate islands – each with its own protocol, licensing and lifecycle
Scale at which data copies multiply hardware, power, bandwidth and licence costs exponentially
Object storage with S3 API as a unified base – readable, metadata-enrichable, usable for backup, archive and AI simultaneously
Backup systems protect, primary storage delivers performance, AI stacks need throughput. Classical architectures solve each task with its own storage island. With AI-era data volumes this no longer scales economically. A converged layer reduces interfaces and copies and makes the same dataset available as both a protected pool and an active AI resource.
Deep dive in the article: Cloud sovereignty: how Berlin and Paris draw a European lineIn cloud and hybrid projects I analyse the actual data flow topology of an organisation, identify cost-driving duplication and develop a converged architecture. Recommendations and authorised changes to the productive data set remain strictly separated – so every change is documented and auditable.
My recommendations are based on real client projects. These include Exchange migrations with several thousand mailboxes, hybrid Microsoft 365 architectures, Schrems-II-compliant cloud designs and Active Directory hardening in KRITIS environments.
I prepare complex matters in an understandable way without sacrificing technical depth. Executive teams, IT leadership and technical staff each receive the information density they need for their decisions. Vendor marketing language is left out.
Strategic consulting on cloud transformations, hyperscaler selection and architecture decisions, also in early project phases without product interests.
I write whitepapers and technical publications with technical depth without marketing language.
Decision documents for executive boards and IT leadership, grounded in 30 years of practical experience and formulated independently of any vendor.
I carry out architecture assessments and take over migration planning in complex environments.
I take on preparatory assessment and external evaluation in early project phases without product interests.
Mid-market and large enterprises, including Mercedes-Benz, MANN+HUMMEL, MediaMarktSaturn, MHP, DATEV, O2 Munich and Commerzbank.
Direct projects at ministerial level for several state governments, and KRITIS operators in the energy, healthcare and finance sectors.
Direct engagements with hyperscalers and premium manufacturers, including Microsoft, HPE, AWS and Google, as a consultant and whitepaper author.
International consulting work across EMEA and the Middle East, including Enovos Luxembourg and a major energy company in the Middle East.
„The article on SR Linux is excellent."
„I always read your iX articles with great benefit – the Proxmox pieces have stuck with me in particular."
Structured video courses with clear practical examples. Topics that actually matter in everyday administration.
Install, configure and securely operate Nextcloud in the enterprise. From setup to productive use.
Get to know Windows 365 in practice. Provision, manage and securely operate cloud PCs for enterprises.
Cloud architecture is not a vendor question but a question of sovereignty, licensing logic and identity. The articles show what I work on with clients.
Political and technical requirements for European cloud sovereignty. What enterprises must concretely check.
Concrete alternative to US cloud services. What OpenCloud offers and where practical adoption pays off.
Microsoft Fabric as a data platform for analytics and AI. What architects must understand early about concept and licensing.
Cloud IIoT platforms for multi-site infrastructures. Selection criteria and provider comparison.
I have written texts and analyses on cloud transformation, hybrid cloud, Microsoft 365, Azure, AWS and cloud compliance. See my publications.
„In the course of our project we got to know Thomas Joos as a highly competent, reliable and flexible service provider who supported us around the clock. During the migration, all mailboxes from our sites were migrated to a Windows Exchange cluster. In addition, Thomas Joos excellently solved the integration of our mobile clients with Exchange. With his methodical and secure approach, his expertise and his innovative power, he optimally completed the complex migration project with great commitment."
Am 12. Januar 2027 endet der erweiterte Support für Windows Server 2016 und Windows 10 Enterprise LTSC 2021 gleichzeitig. Beide Plattformen erhalten danach keine Sicherheitsupdates mehr, offene Schwachstellen bleiben dauerhaft ungepatcht. Daraus ergibt si…
Read articleDie Analyse von Festplatten und SSDs liefert wichtige Hinweise auf Zustand, Leistung und technische Eigenschaften eines Datenträgers. DriveInfo ist ein kompaktes Windows-Werkzeug. Die Software liest Hardwaredaten, S.M.A.R.T.-Werte sowie Partitionsinformatio…
Read articleDer Mainstream-Support für Windows Server 2022 endet im Oktober 2026. Mit der Entscheidung für Windows Server 2025 sichern sich Unternehmen drei zusätzliche Jahre Produktpflege, eine längere Office-Kompatibilität auf RDS-Hosts und den Zugriff auf moderne Fu…
Read articleRadfahrer brauchen im Kartenbild andere Informationen als Autofahrer oder Fußgänger. Ein Kartendienst auf Basis von OpenStreetMap stellt Radrouten, Wegebeläge und Höhenlinien fertig bereit. Für Entwickler von Radanwendungen senkt das den Aufwand gegenüber g…
Read articleNextcloud reagiert empfindlich auf strukturelle Engpässe im Storage, im Kernel und in der Prozesssteuerung. Reine Parameteranpassungen im PHP-Stack reichen in produktiven Umgebungen selten aus. Erst eine gezielte Optimierung von Dateisystem, Datenbank, Netz…
Read articleMediaFire stellt einen webbasierten Cloud-Speicher bereit, der vollständig im Browser arbeitet und keine lokale Client-Software voraussetzt. Die Plattform kombiniert einfache Upload-Funktionen mit einer dateimanagerähnlichen Oberfläche und deckt damit grund…
Read articleWhether strategic assessment, migration guidance or whitepaper – let me know in which context you need support. First conversations are free of charge and non-binding.
Get in touch