Ideal setup for a consultant with different clients on a Windows (11) machine


Recommended Posts

Just a question... when working as a consultant on 1 laptop with multiple clients and client-environments, custom/client logins, applications etc... what is the best setup?

Given that's everything secured via agreements and righteous use of software per client, GDPR etc.

 

- each client a different Windows user on your (local) machine, with the apps installed that are needed per client?

- use different VM's?

- use virtual desktops?

- use specific software for client-management? (if so  which?)

- something else?

It really depends on the agreements you have with your clients. One other option you can consider (if complete data separation is required) is multiple Windows installs, and you boot into the specific client install as required.

 

The main issue with this, as well as using different client accounts is that it might get very annoying for you when you want to do things like check your mail, keep browser bookmarks in sync, have shared documents (quotes and the like) - because each install/account would require you to keep its own set of what is basically common data. But again, it's all down to what your agreements say regarding data privacy.

 

VM's are not a bad way to go if your machine can run them with good performance. This will depend on what client specific software you want to run inside the VM though.

  • 4 weeks later...
On 29/09/2022 at 00:52, BoondockSaint said:

It really depends on the agreements you have with your clients. One other option you can consider (if complete data separation is required) is multiple Windows installs, and you boot into the specific client install as required.

 

The main issue with this, as well as using different client accounts is that it might get very annoying for you when you want to do things like check your mail, keep browser bookmarks in sync, have shared documents (quotes and the like) - because each install/account would require you to keep its own set of what is basically common data. But again, it's all down to what your agreements say regarding data privacy.

 

VM's are not a bad way to go if your machine can run them with good performance. This will depend on what client specific software you want to run inside the VM though.

Is VirtualBox a decent program, or do I need more 'professional like' tooling for this. If so, which?

I don't mind paying for it, as long as it's reasonable and somewhere around a maximum €100/$100 /year (or preferably a one time down payment)

I guess the devolutions suggested by @binaryzero is a bit too expensive for me and the purpose I would like to use it for.

VirtualBox is a solid offering, especially given its pricetag of $0. It is highly configurable, whether it can do what you need really depends on the software you will install inside of it. Its primary commercial competitor would be VMware Workstation, which (in the EU at least) is around €188 (perpetual license, so you only pay for main version upgrades).

Of course the biggest consideration is what your host machine is - and how many resources you can give your VMs.

Client privacy is important, but whether you want to go to this level of data separation really depends on what sector you are working in. You need to consider software licensing if you go with the VM approach - sure you can install MS Office 365 (as an example) on multiple devices, but what about other apps you need. Are your clients providing you with individual licenses? If you're running with VMs, you need to think about backing up that data - not just the whole VM (that part is easy), but the client documents too. In that scenario, do you need to keep them on separate backup drives, or can you have them toegher?

Will this computer be used strictly for client work, or will it be for your own purposes too. You could make it simpler by having separate user accounts on the machine for each client. This would mean that your browser caches, bookmarks, mail files, documents all have their own home directory. You can still install software for each client on the machine as a whole, but configuration is kept with the user profile.

Well it'd help if you told us what sort of consulting you'll be doing...

Lol too expensive....jfc, purchase software and then make your money back...it's paid for itself. 

Edited by binaryzero

I'm into digital marketing & customer journey developments for clients. And everything I purchase needs to be "paid back" via the customer in my rates. So I would like to keep those as clean, and competitive, as possible.

Normally specific software, and licenses, are paid by the customer (and I can use them with their credentials). Some other (generic) tooling I have myself.

So therefore I would like to have, for each client of mine, single environments and/or filesharing way like OneDrive, Sharepoint or whatever (VM or something similar). Separated from other customers of mine, on 1 notebook, so I only have to log in into one client-environment and use all the software, tools that are needed for that particulier job/assignment.

 

PS Sure, I do get it that some software needs to be purchased, but I don't really get the "jfc" by @binaryzero for just asking what kind of software I best can get, and my reference on it. That's what this thread it about. Not about me not (willing to spend) money on this type of software/services.

  • Like 1
On 30/10/2022 at 11:28, kiddingguy said:

I'm into digital marketing & customer journey developments for clients. And everything I purchase needs to be "paid back" via the customer in my rates. So I would like to keep those as clean, and competitive, as possible.

Normally specific software, and licenses, are paid by the customer (and I can use them with their credentials). Some other (generic) tooling I have myself.

So therefore I would like to have, for each client of mine, single environments and/or filesharing way like OneDrive, Sharepoint or whatever (VM or something similar). Separated from other customers of mine, on 1 notebook, so I only have to log in into one client-environment and use all the software, tools that are needed for that particulier job/assignment.

 

PS Sure, I do get it that some software needs to be purchased, but I don't really get the "jfc" by @binaryzero for just asking what kind of software I best can get, and my reference on it. That's what this thread it about. Not about me not (willing to spend) money on this type of software/services.

Don’t sweat the “jfc”. Some people don’t tolerate others not thinking their way. Best to ignore them like they don’t exist. 
 

I don’t know the correct answer here but it seems to me VMs are the way to go if you want to keep them completely separate. There are low cost alternatives if you need a connection manager, like Royal TS. If you don’t need drive redirection, MS even has a  decent manager out there for free. Check out their client on the store. If aesthetics aren’t your thing, 

https://mremoteng.org

 

MS has an rdp manager for macOS.

Reminna would be useful if running Linux.

 

Are you possibly overthinking this?

Get a NAS, and setup shares.  a sperate share  per customer.  This covers your data seperation in an easy to manage manner.  

Do you really need to keep all your applications seperate?  If a client buys you an application to use, chances are it MIGHT be specific to their needs so no worry about using it for multiple clients (even then, do they care?)

 

I am in a similar boat to you, contractor with multiple similar clients, I just use the tools I need and charge the clients accordingly, keep their data in separate shares on the NAS, all backed up to an external HDD and cloud.

 

If your clients are total Nazi's on data seperation and security then the VM way might be the best way to go.  that would be a pain TBH, but each to their own in the end.

 

Good luck

On 28/09/2022 at 14:30, kiddingguy said:

Just a question... when working as a consultant on 1 laptop with multiple clients and client-environments, custom/client logins, applications etc... what is the best setup?

Given that's everything secured via agreements and righteous use of software per client, GDPR etc.

 

- each client a different Windows user on your (local) machine, with the apps installed that are needed per client?

- use different VM's?

- use virtual desktops?

- use specific software for client-management? (if so  which?)

- something else?

Windows 11 Pro, Hyper-V, encrypted workstations per client.

Don't ever ever allow client work to overlap your personal machine, except in the minor case of inprivate browsing.

I have a separate Asus machine with an AMD Ryzen 4500U, 8 GB RAM, Windows 11 Pro installed.

Thus... for each client a separate Windows user can be doable?
My personal machine is & stays my personal machine. Data from clients will never enter there.

On some policies IT-depts can - after approval by managing 'this device' - wipe the entire machine when a (data) breach has been the case (or they suspect it.

Does this mean, when I opt for another Windows-user, that my complete machine can be wiped (incl. the data from my own company, and other clients as well?
Or... will only this Windows-user be deleted from the machine?

In the first case, I think a VM would be the better option, because its "externally" managed on my computer. Also for other security reasons for my company itself as well as other clients, this might be the better other since it's more 'sandboxed' than a (more common) Windows user, right?

Typically if you're consulting, the client will provide you with the environment...

Another Windows user? Errrr okkaay.... This won't make any difference except be a pain in the ass when you need to work on multiple things.

If you're asking these questions, you probably shouldn't be offering consulting services.

  • Dislike 2
On 01/11/2022 at 06:04, binaryzero said:

Typically if you're consulting, the client will provide you with the environment...

Another Windows user? Errrr okkaay.... This won't make any difference except be a pain in the ass when you need to work on multiple things.

If you're asking these questions, you probably shouldn't be offering consulting services.

WTH 'if your asking these questions'..., please @binaryzerocome up with real & supportive answers/options to my question - as this forum is for; helping each other out!!. And not bashing on everything that has been said here. This totally makes no sense to me. And is completely not helpful.

I have been on several jobs & assignments in the past. In some cases the client will provide the environment, and sometimes even the hardware. In some cases they don't.
And maybe I am overthinking this, but I would like to do right (GPDR and security wise) for my client, and myself.

I am now on a possible assignment where I should bring in my own (company) notebook - with their tooling etc - and would like to know what options there are to have it organized and managed professionally.

On 01/11/2022 at 06:16, binaryzero said:

Just install the tools on your machine and use it, organise your data in folders. Yeah, you're overthinking it...

And that's the whole thing here in this thread... which "tools" to use :ermm:

On 31/10/2022 at 23:11, binaryzero said:

Maybe the tools that are required to do...the job? 

You're the one providing professional services for a particular skill you have, you should know which pieces of software you're going to need to use...

 

Everyone starts somewhere. Playing gatekeeper just makes you look bad. 

  • Like 2
On 01/11/2022 at 07:11, binaryzero said:

Maybe the tools that are required to do...the job? 

You're the one providing professional services for a particular skill you have, you should know which pieces of software you're going to need to use...

 

That's right. The tooling/software I use it clear and how to deploy.

But I'm talking about environments in/on how to use them on a notebook used for business purposes.

Like should I create a new user for this, a VM, remote desktop, virtual desktop, client management software etc etc. What is best security-wise, and also software-management wise. Also, as stated, what about giving too much rights away on controlling my main machine with (Microsoft) managed, outsourced, IT-services and alike. I don't like giving too much control to other parties on my own notebook.

On 31/10/2022 at 23:16, kiddingguy said:

That's right. The tooling/software I use it clear and how to deploy.

But I'm talking about environments in/on how to use them on a notebook used for business purposes.

Like should I create a new user for this, a VM, remote desktop, virtual desktop, client management software etc etc. What is best security-wise, and also software-management wise. Also, as stated, what about giving too much rights away on controlling my main machine with (Microsoft) managed, outsourced, IT-services and alike. I don't like giving too much control to other parties on my own notebook.

You will want a machine with more ram if you are going to be using VMs. 8GB won’t be sufficient. 

On 01/11/2022 at 16:16, kiddingguy said:

That's right. The tooling/software I use it clear and how to deploy.

But I'm talking about environments in/on how to use them on a notebook used for business purposes.

Like should I create a new user for this, a VM, remote desktop, virtual desktop, client management software etc etc. What is best security-wise, and also software-management wise. Also, as stated, what about giving too much rights away on controlling my main machine with (Microsoft) managed, outsourced, IT-services and alike. I don't like giving too much control to other parties on my own notebook.

Then ask them to provide a machine... And just install the software, as per normal.

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
  • Recently Browsing   0 members

    • No registered users viewing this page.
  • Posts

    • Apple has clarified Series 9 was left off the watchOS 27 compatibility list by mistake.
    • Signal accuses UK government of using child safety as cover for mass surveillance by David Uzondu Recently, the UK's Home Office announced a sweeping set of proposals to make Britain the "first country in the world" where children cannot share or view nude photos on their smart devices, an initiative that authorities claim will protect children from online predators and combat pornography. In response, Signal believes that while the government must keep children "safe" and "protected," it should do so through social services and education, not by "surveillance, funding cuts, and cover-ups." The company called the plan "dystopian" and warned that it violates everyone's fundamental right to privacy, arguing that scanning on the presumption of nudity will only strengthen the market dominance and data control of giant corporations like Apple and Google. The statement continues by accusing the government of hiding its true intentions under the guise of child safety. Signal argues that the Home Office is building an invisible surveillance infrastructure that remains ripe for exploitation by future administrations and authoritarian regimes. According to the company, this aggressive approach completely ignores the actual needs of young people, such as properly funded schools and mental health services. Tech companies like Apple and Google have a three-month window to implement these mandatory device-level filters across the United Kingdom. If these tech firms refuse to comply with the mandate, the government will pass emergency legislation to force them to comply, threatening massive fines and even going after the CEOs of these companies with criminal charges. The technology will work by blocking explicit images directly on the operating system of all smartphones and tablets by default. This system monitors the device camera and third-party apps to intercept nudity before anyone can upload or send the image. Adults can still view explicit content, but only after completing a strict age verification check to unlock their devices. Several bodies like the NSPCC and Barnardo's praised the Home Office's decision, arguing that device-level intervention stops the cycle of grooming before it starts. The Internet Watch Foundation (IWF) also supported the policy, claiming that tech companies can implement on-device checks "without threatening privacy or collecting any data."
    • Did you watch the keynote? It is way beyond what is described in this article. Looks interesting. Now it is time for them to deliver unlike what happened in 24.
    • It pretty much has to be compatible with MS Office or it is going nowhere. The rest of the world runs office including Europe. If it is not compatible it will not survive.
    • Incredible deal gets you free NVMe 512GB SSD with AMD AM5 B850 motherboard for only $150 by Sayan Sen Earlier this week we covered the story of an interesting PC case wherein you can build two full-size computers inside it as in it can house and run an AMD and an Intel system simultaneously. Speaking of building PCs, these are hard times to make one for sure as prices are often very high except during flash sales or discounts. If you are in the market for a 1080p gaming PC then Nvidia's 8GB RTX 5060 Ti is currently on sale for just $330 and you get the latest James Bond game too, for free. Speaking of which, right now there is another incredible sale going on as we can get a free 512 GB NVMe SSD from TeamGroup in the form of the G50 alongside the purchase of an AMD B850 socket AM5 motherboard for only $150 (purchase link under the specs table down below). Getting an AM5 motherboard now in 2026 will be a wise investment for sure, especially since AMD confirmed its commitment to support the socket till at least 2029. The MSI PRO B850M-P WIFI is a micro-ATX motherboard that is compatible with AMD Ryzen 9000 series processors. Since it is AM5, the motherboard works with DDR5 memory and includes MSI’s Memory Boost technology, along with EXPO and XMP support. Connectivity features include built-in Wi-Fi 7 paired with a 5G LAN solution. The board offers a PCIe 5.0 M.2 slot with MSI’s EZ M.2 Shield Frozr II thermal solution, that is said to help maintain SSD performance by providing ample cooling against overheating. The technical specifications of the MSI PRO B850M-P WIFI motherboard are given in the table below: Specification Value Form Factor Micro-ATX (mATX), 243.84 × 243.84 mm Chipset AMD B850 Socket AM5 Supported Processors AMD Ryzen 9000, 8000, and 7000 Series Desktop Processors Memory Slots 4 × DDR5 UDIMM Max Memory 256 GB Memory Speed DDR5 8200–5600 MT/s (OC), DDR5 5600–4800 MT/s (JEDEC) Display Outputs 1 × HDMI 2.1 (up to 4K 60Hz) 1 × DisplayPort 1.4 (up to 4K 60Hz) PCIe Slots 1 × PCIe 5.0 x16 (CPU) 3 × PCIe 3.0 x1 (Chipset) Audio Codec Realtek ALC897 Audio Channels 7.1-Channel High Definition Audio M.2 Slots 3 × M.2 slots M.2_1: PCIe 5.0 x4 (CPU) M.2_2: PCIe 4.0 x4 (CPU) M.2_3: PCIe 4.0 x2 (Chipset) M.2 Device Sizes M.2_1: 2280/2260 M.2_2: 2280/2260 M.2_3: 2280 SATA Ports 4 × SATA 6Gb/s RAID Support SATA: RAID 0, 1, 10 NVMe: RAID 0, 1, 5, 10 Rear USB Ports 4 × USB 2.0 2 × USB 5Gbps Type-A 1 × USB 10Gbps Type-A 1 × USB 10Gbps Type-C Front USB Headers 4 × USB 2.0 4 × USB 5Gbps Type-A 1 × USB 10Gbps Type-C LAN Realtek 8126VB 5Gb Ethernet Wireless Networking Wi-Fi 7 (802.11 a/b/g/n/ac/ax/be) Tri-band 2.4GHz / 5GHz / 6GHz MU-MIMO, MLO, 4KQAM Up to 2.9Gbps Bluetooth Bluetooth 5.4 Internal Power Connectors 1 × 24-pin ATX Power 1 × CPU Power 1 × PCIe Power (8-pin) Cooling Headers 1 × CPU Fan 1 × Combo Fan/Pump 3 × System Fan RGB Headers 3 × Addressable RGB Gen2 (JARGB_V2) 1 × RGB LED (JRGB) Additional Internal Headers 2 × Front Panel (JFP) 1 × Chassis Intrusion (JCI) 1 × Front Audio (JAUD) 1 × COM Port (JCOM) 1 × JDASH Tuning Controller 1 × TPM 2.0 Header The free TeamGroup T-FORCE G50 NVMe SSD is a PCIe Gen4 and as such it promises to deliver sequential read speeds of up to 5,000 MB/s, helping accelerate game loading, file transfers, and everyday computing tasks. The SSD features an InnoGrit controller and SLC caching technology to support consistent performance. An ultra-thin, patented graphene heatsink is included to aid in heat dissipation. The NAND flash is based on TLC which means it has plenty of endurance up its sleeve. The random performance may not be as amazing as other drives with DRAM though. Still it should be very good since it can access system memory via HMB to use it as its DRAM cache. The technical specifications of the TeamGroup 512GB G50 NVMe SSD are given in the table below: Specification Value Model / Part Number TM8FFE512G0C129 Form Factor M.2 2280 Interface PCIe Gen4x4 with NVMe Sequential Read Speed Up to 5,000 MB/s Sequential Write Speed Up to 2,500 MB/s Endurance (TBW) 325 TBW DRAM Cache No Cache Technology SLC Cache Controller InnoGrit Controller Solution Operating Temperature 0°C to 70°C Storage Temperature -40°C to 85°C Weight 7 g Dimensions 80.0 × 22.0 × 3.7 mm Vibration Resistance 80 Hz ~ 2,000 Hz / 20G Shock Resistance 1,500G / 0.5 ms MTBF 3,000,000 hours Get it at the link below: MSI PRO B850M-P WIFI AM5 AMD motherboard + Team Group T-FORCE G50 TM8FFE512G0C129 512GB SSD (free gift): $149.99 (Sold and Shipped by Newegg US) This Newegg deal is US-specific and not available in other regions unless specified. This is a first-party seller link (at the time of article publishing); ensure that you also purchase from a first-party seller link only. If you don't like it or want to look at more options, check out the previous deals that we have covered, OR you can also visit Amazon US deals page. Get Prime (SNAP), Prime Video, Audible Plus or Kindle / Music Unlimited. Free for 30 days. As an Amazon Associate, we earn from qualifying purchases.
  • Recent Achievements

    • Very Popular
      Captain_Eric earned a badge
      Very Popular
    • One Month Later
      amusc earned a badge
      One Month Later
    • One Month Later
      DJC50PLUS earned a badge
      One Month Later
    • Week One Done
      DJC50PLUS earned a badge
      Week One Done
    • Proficient
      Eric Biran went up a rank
      Proficient
  • Popular Contributors

    1. 1
      +primortal
      503
    2. 2
      PsYcHoKiLLa
      223
    3. 3
      ATLien_0
      87
    4. 4
      Steven P.
      80
    5. 5
      +Edouard
      80
  • Tell a friend

    Love Neowin? Tell a friend!