Deploy and secure the workstations of public administrations and local authorities with MasteriDesk
MasteriDesk helps public-sector IT departments prepare their Windows workstations without travelling: PXE detection, drivers injected automatically, BIOS kept up to date, BitLocker enabled and every deployment tracked in 9 steps, including across estates spread over many sites.
Imaging public-sector workstations: shared challenges, different realities
Whether you are equipping inter-municipal services, lower or upper secondary schools, MasteriDesk prepares every workstation to your standards, with no unnecessary travel. The same workstation imaging foundation covers every tier of local government.
Urban areas and inter-municipal bodies
Town halls, community services, media libraries, swimming pools, nurseries: workstations spread across many sites with varied business needs.
- Remote preparation over the network (PXE) and local cache
- Standalone USB drive for sites without a server
- Automated licensing and domain join
Départements and lower secondary schools
Since the 2013 Peillon Act, French départements have been responsible for maintaining the digital equipment of lower secondary schools (collèges), with thousands of workstations to prepare.
- Mass imaging: clusters of workstations processed simultaneously
- Drivers injected automatically according to the model
- 9-step tracking and targeted retries of failures
Regions and upper secondary schools
Regions lead the digital modernisation of upper secondary schools (lycées): mobile classrooms, teaching environments and highly secured estates.
- TPM 2.0 enabled, required for Windows 11
- BitLocker with the key backed up in Active Directory
- BIOS updates and BIOS/UEFI compliance rules
Imaging joins the SecuriDesk console
MasteriDesk is available directly in the SecuriDesk console, with its own screens: the Library for your OS images, driver packages and USB media, the Settings screen for your global standards, and workstation-by-workstation tracking of your deployments.
See the MasteriDesk architecture →Prepare workstations across an entire territory without travelling
Between town halls, primary and secondary schools, preparing each workstation on site quickly reaches its limits.
MasteriDesk intercepts each workstation’s network boot (PXE), reads its manufacturer and model via WMI, then admits it to the ‘Sas’ staging area with its MAC address and status. You then prepare clusters of workstations simultaneously, from the SecuriDesk console.
- Automatic detection, in UEFI and Legacy BIOS alike
- Mass imaging on the same network segment
- No hands-on intervention, one workstation at a time
Workstations that meet IT department standards, in every service
Administrative, technical or school services: every workstation must follow the same rules, with no manual steps.
The deployment wizard runs through three steps: system image and licence activation, drivers and hardware optimisations, then local account, domain join and BitLocker. Your global standards are defined once, in the Settings screen.
- ADBA, local KMS or MAK key activation
- Domain join built into the deployment
- BIOS passwords and encryption defined centrally
Mixed estates, without the driver hunt
Over successive renewals, a public-sector estate often mixes several models and several generations of hardware.
MasteriDesk’s central repository maintains a catalogue of Dell, HP and Lenovo driver packages, synchronised with the manufacturers’ catalogues. The right package is injected offline into the Windows image, according to the detected model.
- New ranges added to the repository automatically
- No more subscribing to manufacturers’ XML feeds
- Manual import possible for other hardware
Public-sector workstations secured from the moment they go live
Local authorities are prime targets for cyberattacks: every workstation must be protected from day one.
MasteriDesk updates the BIOS, enables TPM 2.0 and applies BIOS/UEFI compliance rules. BitLocker encryption is enabled during post-installation, subject to the automatic backup of the recovery key to Active Directory.
- TPM 2.0 enabled, required for Windows 11
- Prerequisites validated before encryption starts
- Recovery keys centralised in Active Directory
Track every deployment, workstation by workstation
With IT teams often small and territories large, every failure must be identified quickly.
The interface shows each workstation’s progress in 9 steps, from PXE boot to BitLocker, in detailed or grid view. You know exactly where a deployment failed, for example at activation, and you retry only the workstations concerned.
- Precise diagnosis, down to the step
- Targeted retry of failed installations only
- Goal: under 20 minutes of preparation per workstation, versus 2 hours
Equip your remote sites without saturating their connection
A media library, a swimming pool or a school does not always have a technician on site.
The local probe caches the drivers for each model: they are downloaded only once per site, then distributed over the wired network. For a site without a PXE server, you prepare from the Library a standalone USB drive, protected by a time-limited password.
- Example: 10 identical workstations, 4.5 GB of bandwidth saved
- Site Internet connection preserved
- USB drive to ship to the local technician
A batch of new workstations, ready without travelling
For example, a batch of new computers delivered to a lower secondary school and plugged into the school’s network.
- DetectionThe workstations boot from the network and appear in the Sas, with their model.
- LaunchThe administrator selects the batch and launches the installation from the SecuriDesk console.
- Licences and BIOSLicences are activated via ADBA and BIOS firmware is updated.
- Domain and encryptionOnce the workstations have joined the domain, their disks are automatically encrypted with BitLocker.
Illustrative scenario, based on MasteriDesk documentation.
Industrialise workstation preparation across your territory
Urban areas, départements, regions: let’s talk about your challenges and see how MasteriDesk adapts to the way your territory is organised. The solution is also aimed at managed service providers supporting local authorities.