Remote Work Infrastructure: What You Actually Need
A lot of small businesses are still running remote work on infrastructure that was improvised in a hurry and never revisited. It functions, mostly, with recurring friction everyone has learned to tolerate. This is what the deliberate version looks like.
The decision that shapes everything else
Where does your data live? Everything else follows from the answer.
If files still live on an office server, every remote worker needs a tunnel back to that office. That means VPN dependency, latency on every file open, a single point of failure at your office internet connection, and a support burden that grows with every remote person.
If files live in SharePoint and OneDrive, people connect directly to Microsoft. No VPN for daily work, no dependency on your office being online, and files sync locally so they open at local speed and remain available if the internet drops.
For most small businesses the second is clearly better, and it's usually already included in licensing you own. It's also the change that eliminates the most ongoing friction — which is why we'd do it before anything else on this page. More detail in what Microsoft 365 already includes.
What still justifies a VPN
Some things genuinely need one: an internal line-of-business application, an on-premises database, specific equipment on the office network, or a remote desktop environment.
The mistake is routing all traffic through it out of habit. That adds latency to everything, makes your office connection a bottleneck for every remote worker, and gives a compromised laptop a direct tunnel into your internal network — all to protect traffic that was already encrypted.
Use split tunneling so only traffic destined for internal resources takes the VPN. And patch the VPN appliance's firmware on the same schedule as everything else — internet-facing edge devices are among the most heavily targeted things you own, and they're routinely left unpatched for years.
Internet: the dependency people underestimate
Once files and applications are in the cloud, your internet connection stops being a convenience and becomes the thing your business runs on. An outage doesn't slow work down, it stops it.
For the office, that means a second connection from a genuinely different provider — ideally a different technology, so fiber plus cable or fixed wireless rather than two services riding the same infrastructure. A firewall that fails over automatically makes this invisible when it works.
For home workers, the practical answer is usually a mobile hotspot as a fallback, and a clear expectation about the minimum connection quality the role needs. It's worth stating that up front rather than discovering it during a client call.
What to give people at home
The temptation is to send a laptop and consider it handled. A few things earn their cost repeatedly:
- A business-class laptop you manage, not a personal machine. This is the foundation for everything security-related — you can't enforce encryption or patching on a device you don't control.
- A real monitor and keyboard. Unglamorous and the highest-return spend on this list. People working all day on a 13-inch screen are measurably slower and less happy.
- A decent headset. Bad audio degrades every meeting for everyone in it.
- A dock, so connecting is one cable rather than a daily ritual.
- A webcam if the built-in one is poor.
Total is a few hundred dollars per person, once. Against salary cost, the payback period is measured in weeks.
Identity and device management
With people working from anywhere, your security model has to shift from "trust the network" to "verify the person and the device." Practically:
- MFA on everything, with number matching enabled
- Devices enrolled in Intune so you can enforce encryption, screen locks, and patching regardless of location
- Conditional access requiring compliant devices for sensitive access
- App protection policies for the personal phones people will use for email whether or not you approve
We go through this in detail in securing remote workers.
Meeting rooms and the hybrid problem
Hybrid meetings are where most setups quietly fail. Six people in a conference room around one laptop, and the three remote attendees can't hear properly or tell who's speaking. The predictable result is that remote participants disengage and decisions get made without them.
The fix is unexciting: a proper conference camera and speakerphone in any room used for hybrid meetings, and a habit of having in-room participants join from their own devices on mute so everyone appears as an equal tile. The equipment costs a few hundred to a couple of thousand dollars per room depending on size, and it's the difference between hybrid meetings working and being tolerated.
Support that works remotely
A support model built around walking to someone's desk doesn't survive distribution. You need remote support tooling that works without the user doing anything complicated, a documented way for people to report problems that isn't "text the owner," and a plan for hardware failures — a spare laptop that can be shipped and enrolled beats a three-day wait every time.
A sensible order
- Move files to SharePoint and OneDrive; reduce VPN to what genuinely needs it
- MFA and device management on every machine
- Redundant internet at the office
- Proper home setups — monitor, keyboard, headset, dock
- Conference room equipment for hybrid meetings
The first two are mostly configuration of licensing you already hold. The rest is modest hardware spend with fast payback.
Setting up or fixing a distributed team?
Vulcan365 designs and supports remote and hybrid infrastructure for businesses across Birmingham and Central Alabama — usually starting by removing the friction people have stopped noticing.
Talk to us about remote work