We're in a startup company where we would like to have a free and easy way to manage our employees PC's. Basically the requirements we're looking for are the following.
Administratorthey should be able to login on any
UsersPC and see the same Desktop and profile settings etc. (Remote access is not necessary.)
Users should be able to update their machines and software, on their own and as fit, once that SW has been already installed by Admin. (Eg. Chrome, FF, Slack etc.)
Users should not be able to install new or additional software on their own.
Use an easy hardware based PC unlock mechanism. Either a card-based (SmartCard/RFID) or USB dongle based. Pros/Cons?
What else should we think about?