Windows Server 2012 R2 or 2016 – DNS server; Active Directory: multiple sites, diagnosed replication, setup/managed trusts; advanced authoring and management of group policy objects;
Centralised and automated deployment and management of Windows 10 operating system (MDT or SCCM) and patches (WSUS or SCCM), application software (other than MSI deployments through group policy), and anti-virus
PC security including encryption of devices, roaming always-on secure connections (for laptops), and ransomware prevention
Recognised multi-factor authentication and/or single-sign on solution(s)
Physical and...