If the cognitive load of migrating away from Windows is too much, ManageEngine is free for your use-case (for forcing updates/policies, monitoring, and managing

If the cognitive load of migrating away from Windows is too much, ManageEngine is free for your use-case (for forcing updates/policies, monitoring, and managing access). I'd look at using Assigned Access too (previously known as Kiosk Mode) for locking down their environment to things like browsing the internet.. And nothing else: https://learn.microsoft.com/en-us/windows/configuration/assigned-access/overview https://learn.microsoft.com/en-us/windows/configuration/assi... However, locked down Chromebooks and Android profiles are generally the best way to go. Not sure about the Apple ecosystem (even though that's what I'd choose - just haven't found readily available advice).