Need solutions for…

Patch Management; Open Source Windows +Mac possibly based on WinGet
Current best solution is to put all PCs in a domain and use Group Policies. -requires DC -requires PC onsite/connected

Android Cell Phone based IP KVM. Connect to WiFi, Install the App, plug the USB-C cable into a PC/Cellphone and point the camera at the screen. now you can control the PC without installing software, from a different continent, reboot and enter the bios, install an operating system. There is NO remote control software for Apple phones. Send one of these to each remote site and now you never need to ship a PC back when it has a virus/won’t boot/needs a risky upgrade/needs initial software load installed. bonus points if it can mount an image as a USB drive.
Current best solution is PiKVM or TinyPilot -no camera so doesn’t work with cell phones