I will configure microsoft endpoint manager with compliance policy

Get endpoint security, device management, and intelligent cloud actions in a unified management platform with Microsoft Intune and Configuration Manager.

I will enroll all type of devices and deploy best compliance policies.Set and get ready an Auto Pilot Policy on a separate Group. Just put the new user in this group and all your apps will be rolled out to this new device...No need to burn a new image and spend hours....

Endpoint Manager combines services you may know and already be using, including Microsoft Intune, Configuration Manager, Desktop Analytics, co-management, and Windows Autopilot. These services are part of the Microsoft 365 stack to help secure access, protect data, and respond and manage risk.