At my current employer, we use Microsoft Intune to manage and white‑glove-deploy our Windows endpoints in a hybrid‑join environment. Until I joined, they relied on Chocolatey to deploy and update (some) applications. With the release and maturing of WinGet some time ago, it’s now a good replacement