Care Association: Faster, Safer, and Hands-Free Work with AI PCs

Case Study • Home Care • ±2,300 employees

Case (home care, ±2,300 employees) – zero-touch deployment, IR cameras for facial recognition, and locally running AI tasks. With 2,300 colleagues, you want IT to just work—without detours. Care Association opted for AI PCs with Windows Hello Face (IR camera), Intune Autopilot, and strict but user-friendly management via Entra ID. Result: hands-free login (works with gloves), deployment in about 35 minutes instead of ~3 hours, fewer support tickets, and faster record keeping thanks to local dictation and summarization. All within GDPR and NEN 7510 frameworks.

Challenge

Care teams and back-office staff needed faster onboarding, less login friction, and better performance during video calls and documentation—without compromising privacy or compliance. Fingerprint scanners proved unreliable in practice due to gloves and disinfectants; the requirement was a hands-free, privacy-conscious solution that always works.

Solution

We chose a standardized device package per user group, with IR cameras for Windows Hello Face, Windows 11 Pro, BitLocker encryption, and management via Microsoft Intune and Entra ID.

User Groups & Hardware

Group	Hardware	Features
Back Office	HP ProBook 4 G1i, 14-inch	Docking + external display
Care Teams	Lenovo ThinkBook 16 G8	Intel® Core™ Ultra 5 (NPU) for on-device AI

Both profiles use zero-touch setup via Intune Autopilot, Single Sign-On via Entra ID, and policy-based security (Conditional Access, WDAC where relevant).

Why IR Camera (Windows Hello Face) in Healthcare?

Hands-free login: works with gloves and masks; no hassle with fingerprints.

Fast and consistent: less login friction, faster access to EHR/EPD and primary tasks.

Secure: local biometrics combined with BitLocker and company policies.

Implementation in 4 Steps

1. Inventory & standard profiles: profiles per role (apps, policies, permissions).
2. Autopilot images & testing: golden image, security baselines, and pilot group.
3. Phased rollout: schedule per team/location, device swap, and data migration where needed.
4. Adoption & support: micro-training "Smart Work with Copilot," quick-reference cards, and service desk manual.

Security & Compliance (Compact Overview)

Data location: work files encrypted on the device (BitLocker) and in the tenant; no uncontrolled cloud exfiltration.

Access policy: Entra ID + Conditional Access; fallback for facial recognition via PIN or passkey.

Monitoring: Intune reports on encryption status, policy compliance, and software versions.

Results

Measurable acceleration in deployment, fewer tickets, and higher job satisfaction. Key points:

KPI	Before	Now
Device deployment	±3 hours manual	±35 min via Autopilot
Support tickets (login/deployment)	Baseline	-32% (post-rollout period)
Time savings per employee	—	+2 hours per week (indicative)

Indicative ROI

Time savings alone yield immediate value. Example calculation (indicative):

2 hours/week × 48 weeks × €25/hr ≈ €2,400 per FTE/year

Technology Overview

Back Office (Office/Back Office)

Aspect	Choice
Device	HP ProBook 4 G1i – 14-inch + docking + external display
Management	Microsoft Intune + Entra ID (SSO), Autopilot
Security	BitLocker, Conditional Access, Defender, optional WDAC
Practice	Quick start, dual monitors, stable Teams calls, hands-free login

Care Teams (Mobile)

Aspect	Choice
Device	Lenovo ThinkBook 16 G8 – Intel Core Ultra 5 (with NPU)
Management	Microsoft Intune + Entra ID (SSO), Autopilot
Security	BitLocker, Conditional Access, Defender
Practice	Hands-free login, bright 16:10 screen, local dictation/summarization

Local AI – Directly Useful in Healthcare Practice

Dictate → summarize → populate fields in EHR (without audio leaving the organization).

Live captions and noise suppression during video calls; less repetition for clients.

Automatically summarize internal memos and protocols into to-dos.

User Quote

"Logging in without touching and a workstation ready in half an hour—you notice that in every shift."

Adoption & Support

Micro-training "Smart Work with Copilot" and short videos (2–5 min).
Quick-reference cards per role; service desk FAQ on the intranet page.
Periodic health check: patch level, encryption status, login friction, and EHR performance.

Plan a 30-Day Proof-of-Value

You get: (1) pilot set with IR cameras and standard profiles, (2) measurement plan for time savings and tickets, (3) advisory report with next steps.