I manage a windows server machine for a small business. I do it part time for my brother's business. I've enabled usual protection suggested by Microsoft like regular scan, backup, write protection in certain folders with whitelist etc. Are there FOSS tools that I can use to manage, monitor and secure Windows machine. His office also has 7-8 windows laptops connecting to this "server" which is just a powerful AMD desktops class machine with good storage and memory. How can I manage this small fleet and secure them also?
I’d enrol the laptops at least into Microsoft Endpoint Manager (InTune) so you can apply device management policies and monitor activity; potentially doing for the server too.