Centralized Windows Device Management Setup

I run a small startup with about ten Windows desktops and laptops and I’m ready to standardise them under one clean, fully licensed company image. I need an IT specialist to:

• Build a reproducible “golden” Windows image that includes only licensed software and our branding. • Deploy that image remotely to every workstation with minimal disruption to my team. • Create a single admin account that lets me monitor installed software, track updates and receive alerts when anything drifts from policy. • Configure secure remote-support access through TeamViewer or AnyDesk so I can reach any device on demand. • Document the exact setup steps, licence keys in use, and a simple process for bringing new machines online.

I’m open to whichever management stack you recommend—Microsoft Intune, Endpoint Manager, a lightweight on-prem Active Directory, or another proven solution—so long as it scales as we grow. I would also like guidance on selecting and activating core tools (for example an Office suite, reliable antivirus and a collaborative project tool) so everything stays compliant from day one.

Success is a stable, centrally managed fleet that I can audit and maintain remotely without touching each keyboard, complete with a hand-off guide I can follow in the future. IN case you have a better cheaper open source solution, I am ok with it.. this would also enforce sso and monitor their productivity and cannot share any files with the outside world either thru usb/ mail. Budget: INR 1500–12500 Skills: Windows Desktop, C# Programming, Windows Mobile, Active Directory, Windows Server, Network Administration, Security, Network Security, TeamViewer, System Administration