I will setup microsoft endpoint manager

Tenant Level Configurations

1. Terms and Conditions
2. Azure AD Branding
3. Microsoft Store for Business
4. Managed Google Play
5. Apple MDM Push Certificate
6. Windows Hello for Business
7. DNS Configuration
8. Device Enrollment Managers
9. Local Intune Administrator Accounts
10. Enable Enterprise State Roaming
11. (PREMIUM) Connect to Microsoft Defender for Endpoint
12. (PREMIUM) Connect to Microsoft Azure Sentinel

Device Enrollments (Windows 10)

1. Enrollment Restrictions
2. Autopilot Setup - Deployment Profile & Enrollment Status Page

Device Enrollments (Android)

1. Corporate-owned devices with work profile
2. Corporate-owned dedicated devices profile

Device Enrollments (Apple)

1. Enrollment type profile

Device Compliance

1. Basic Windows 10 Compliance Policy
2. Basic Android Compliance Policy
3. Basic macOS Compliance Policy
4. Basic iOS/iPadOS Compliance Policy
5. (PREMIUM) Azure AD Conditional Access Policy to force MFA on non-compliant devices

Device Configurations (Windows 10)

1. Basic Device Restrictions
2. Basic Endpoint Protection
3. Windows Hello for Business
4. Basic BitLocker Policy
5. Power Settings
6. OneDrive Settings
7. Basic Outlook Settings
8. Microsoft Edge Settings
9. Basic Microsoft Edge Bookmarks
10. Windows Update Policies