Windows 10: Set up new company computers for employees to be restricted to work purposes only

I purchased new laptops running windows 11 pro for the company. I'd like to set up these computers to be restricted to work purposes only. Restrictions such as software or app installations, personal emails, usb and external storage devices, certain websites including social media, entertainment, and other non-work-related sites, etc. I'd like to also safeguard data on the computer, have automatic updates to be enforced, monitoring and logging, etc. Currently I have microsoft 365 business standard licenses for everyone including me. I tried searching online for set up guides but l'm confused a

:)

 

Setting up a secure network so that employees don't steal company data

That is a considerably large undertaking. Just what I can think of off the top of my head.
You would need the following

• Restrict or block access to usb and cd/dvd storage devices to prevent data from being copied off
• Block or restrict access to personal email and file sharing sites
• DLP system in-line with company email to block company data from being exfiltrated
• Some how handle printed material
• Manage any mobile devices and enforce encryption and remote wiping capabilities for company devices

 

Setting up an employee's computer

I am trying to set up a new laptop which has Windows 11 for a new employee. I don't want to use my or their personal Microsoft account but I cannot set it up with a work account as the primary account. How can I register this as an organization computer with an employee as the user?

 

Setting up a secure network so that employees don't steal company data

Hello,

I have a small company and one of our employees just left the company and while leaving he stole most company data and gave it to our competitors.

It's high time I get a secure system.

I plan on setting up a server through which all internet access will be directed so that I can block certain websites but I don't know which software / settings to use.

Also, I want a software that would log everything.
Like if an employee starts his system, I should get a notification on that server or an email on a separate email that the system has been turned on.
Or if an employee copies a file on his pen drive, I should get some kind of notification.

Please help.