For laptop setup at a company you should be using some sort of MDM software. It's essentially configuration management, but with the understanding that this is

For laptop setup at a company you should be using some sort of MDM software. It's essentially configuration management, but with the understanding that this is for users who will want to change things. If you're an all Mac shop, take a look at Jamf or at Fleetsmith. If you've got a mix, there are some products like Airwatch that support Windows and Mac. These tools allow you to set up applications and configurations. I generally run a white-listed "app" store where users can download apps, scripts and new configurations. Or alternatively you can force install anything you really need. I'll also second using Docker or virtual machines if possible. It makes the setup and continued support much easier.