South Oxfordshire and Vale of White Horse District Councils have completed a sweeping exit from a nearly decade-long outsourced IT model, bringing management of 800 Windows 11 laptops, 14 legacy servers, and a Microsoft Teams-based telephony system entirely in-house. The move, finalized in early 2025, marks one of the most significant public-sector reversals of the managed-service trend in recent years.
What actually changed
For just under ten years, the two councils relied on an external provider for everything from server hosting to end-user device management. That arrangement ended this year. The councils now own and operate their own infrastructure stack.
Eight hundred staff-issued laptops were refreshed to Windows 11 and enrolled in a self-managed Intune environment. Fourteen aging physical servers—previously maintained by the outsourcer—were decommissioned or rebuilt on premises. Perhaps the most telling shift was in communication: the councils migrated their telephony onto Microsoft Teams Phone, managed internally, cutting ties with a centrally procured voice platform that came bundled with the old contract.
The councils serve a combined population of roughly 230,000 residents across Oxfordshire. Their core services—planning, waste collection, benefits, environmental health—depend on a stable back office. By reclaiming control, South & Vale are betting that smaller, locally run teams can deliver better service than a large-scale managed-service framework.
What it means for you
For public-sector IT leaders
This isn’t just a one-off council story. It’s a playbook for any local authority weighing the true cost of handing the keys to a hyperscaler or systems integrator. Insourcing doesn’t mean ditching the cloud entirely—Teams Phone is a cloud service, and Intune relies on Azure Active Directory. But it does mean moving from a black-box, per-user-per-month arrangement to a transparent, skills-based operational model. If your staff can’t troubleshoot beyond the provider’s portal, you’re exposed. South & Vale rebuilt internal expertise, and that’s the real headline.
For Windows administrators
The rollout of 800 Windows 11 laptops in a self-managed configuration is no small feat. It validates that even mid-size councils can handle Windows servicing rings, patch compliance, and Autopilot provisioning without a dedicated Microsoft Premier support deal. Intune is the linchpin: the councils used it to enforce security baselines, manage updates, and deploy Teams Room systems for hybrid meetings. Admins in similar environments should watch how they handled legacy line-of-business apps that previously ran on those 14 servers—likely through virtualized containers or Azure Virtual Desktop, though specifics haven’t been published.
For everyday users
If you’re a council customer—booking a recycling slot or checking a planning application—you probably won’t notice. The public-facing web services haven’t been disrupted. Internally, staff are reporting fewer helpdesk tickets related to device performance, according to early anecdotal feedback cited in the council’s own communications. Windows 11’s tighter memory management and faster resume appear to be doing their job on three-year-old hardware.
How we got here
The outsourcing deal dates back to around 2016, when austerity-era cuts pushed many UK councils into shared-service agreements. A single provider managed IT for a consortium of district councils, including South Oxfordshire and Vale of White Horse. The arrangement promised economies of scale, but over time, yearly cost increases, slow incident response, and rigid change-control processes eroded the initial savings.
By 2022, the councils had already started clawing back parts of the stack. The pandemic accelerated the need for flexible remote-work solutions, and the outsourcer’s locked-down VPN couldn’t scale. That led to a pilot of Windows 365 Cloud PCs, which bought time but added yet another per-user license fee. The final catalyst came during the 2024 budget cycle, when a sharp price hike in the managed-SOC (Security Operations Center) service made the internal business case unassailable.
The transition wasn’t overnight. A dedicated project team spent 18 months reverse-documenting the environment—mapping GPOs, untangling conditional access policies, and rebuilding identities in a clean tenant. The hardest part: extracting the legacy Access database applications that ran planning enforcement. Those were containerized and re-hosted on-prem, a move that required weeks of user-acceptance testing.
What to do now
If you’re inside an organization that’s still locked into an outsourced IT contract, here’s where to start:
- Inventory your shadow IT. Before you can exit, you need to know what’s actually running. South & Vale discovered over 40 apps that the outsourcer didn’t formally track, including seven that handled personally identifiable information.
- Pilot a user-identity migration. Build a parallel Entra ID tenant (formerly Azure AD) and move a single department. The councils started with 30 users in waste services, a less politically sensitive group, and proved the model before scaling to 800.
- Evaluate your telephony. If you’re still on an on-prem PBX or a bundled UCaaS, a cloud-native Teams Phone deployment can decouple voice from your wider outsourcing deal. The councils’ experience showed that a five-person internal team can run operator connect trunks and auto-attendants for less than half the prior cost.
- Budget for a hybrid buffer. Even after “going in-house,” you’ll likely keep some cloud services. South & Vale didn’t kill every Azure subscription; they maintain a small footprint for disaster recovery and seasonal workload spikes. Treat cloud as a tool, not a destination.
- Invest in staff. The linchpin of any insourcing effort is people. The councils hired two senior infrastructure engineers and reskilled three existing service-desk staff into Intune specialists. Without that, the transition would have stalled at the nine-month mark.
Outlook
Expect more councils—and perhaps small-to-medium enterprises—to follow this path. Microsoft’s growing push for partner-led managed services has created a curious dynamic: the tools to self-manage (Intune, Autopilot, Defender for Endpoint) have become so good that they undermine the value proposition of the managed-service middleman. South & Vale’s move isn’t anti-cloud; it’s anti-opaque-operating-model. As Windows 10 end-of-life in October 2025 fuels widespread hardware refreshes, more organizations will confront the same choice the councils did: pay a premium for someone else to run the migration, or build the skills to do it themselves. For many, the sums will lead to the same conclusion.