How a healthcare organization renewed its laptops: zero-touch, fewer tickets, and a calmer workplace

Case Study • Healthcare • Surface Laptop 7th Edition

Practical test with demo units, Surface Laptop 7th Edition (13.8″/15″) and Autopilot profiles — 2025. A large Dutch healthcare center increasingly struggled in 2024 with slow laptops and cumbersome deployment processes. In 2025, the organization decided to take a different approach. The result was surprisingly unanimous: the Surface Laptop 7th Edition performed best — in two sizes (13.8″ and 15″), same family, different profiles.

Intro

A large Dutch healthcare center increasingly struggled in 2024 with slow laptops and cumbersome deployment processes. In 2025, the organization decided to do things differently. Microsoft sent demo units; the IT department compared them to alternative hardware and let a user panel test them. The outcome was remarkably unanimous: the Surface Laptop 7th Edition performed best — in two sizes (13.8″ and 15″), same family, different profiles.

"It had to be faster, quieter, and above all more predictable," according to the project team. A new device is only an improvement if employees receive it in a way that doesn’t create extra hassle. That was the benchmark.

Why this laptop?

During the practical test, the combination of a responsive touchscreen, silent operation, and build quality stood out. Employees who travel frequently often preferred the 13.8″ model; teams working extensively with large spreadsheets appreciated the 15″ version. For IT, the advantage was even simpler: one product line, two sizes — one management model.

Zero-touch as the standard

The renewal wasn’t just about hardware. The healthcare center mainly changed how devices reach employees. Profiles in 2025 were built based on:

Zero-touch deployment via Intune Autopilot
Single Sign-On via Entra ID
Policy-based security with Conditional Access and — where relevant — Windows Defender Application Control (WDAC)

A new laptop now goes directly to the end user. After logging in, the correct profile is deployed, including apps, settings, and permissions. IT no longer needs to perform on-site imaging or manual tweaks.

This is how they approached it (4 steps)

Inventory & standard profiles – Profiles per role: applications, policies, and access rights clearly defined.
Autopilot images & testing – One golden image, security baselines, followed by a small but representative pilot group.
Phased rollout – Smart scheduling per team/location; device swap and data migration as needed.
Adoption & support – Micro-training “Working smarter with Copilot,” quick-reference cards, and a service desk handbook for the most common scenarios.

Security & compliance: compact but solid

Data location: work files encrypted with BitLocker — on the device and in the tenant; no uncontrolled cloud exfiltration.
Access policy: Entra ID + Conditional Access; with facial recognition, there is always a PIN or passkey fallback.
Monitoring: Intune reporting on encryption status, policy compliance, and software versions.
In short: as few exceptions as possible, as much policy as possible.

What were the results?

The combination of a single device line, zero-touch, and tighter policies had measurable impact. The IT department recorded fewer tickets, deployment was faster, and employees directly felt the benefits of a faster, more responsive machine.

Key figures

KPI	Before	Now
Deployment per device	±3 hours manual work	±35 min via Autopilot
Support tickets (login/deployment)	Baseline	-32% (post-rollout period)
Employee time saved	—	+2 hours/week (indicative)
Scale (users)	—	2,500 → ~150,000 hours/year saved

Role of TechOutlet.eu

TechOutlet.eu guided the proof-of-concept, supplied the Surface Laptop 7th Edition in 13.8″ and 15″, and assisted in setting up Autopilot, Entra ID, and the security baselines. Adoption was also addressed: short Copilot sessions and QRCs were enough to shift habits without extensive classroom training.

What’s next?

The foundation is in place. The organization uses Windows 11 as the standard and continues managing devices with Intune and Autopilot. For teams with heavy presentation or design workloads, Surface Laptop Studio is being considered as an additional option — the same Microsoft stack, different use case.

Conclusion

The renewal wasn’t about “the next laptop,” but about a different way of working. By focusing on zero-touch, one clear device line, and policy over exceptions, the workplace became noticeably calmer — and the IT organization more agile. This is exactly the type of modernization that helps healthcare institutions make a difference in 2025.

Want to follow the same path?

From practical testing with demo units to phased rollout — TechOutlet.eu supports hardware, profiles, and adoption, tailored to your team and compliance requirements.