Really productive convo, thanks everyone!
The IOT stuff is interesting because these systems are bespoke products. I’m a queasy about the idea of using a tool like MAS for a production system.
To a large extent we don’t aren’t responsible for the maintenance of the system, but Windows updates that were not prevented opened up the question of whether we should step in preemptively. Big customer so its not like we can shrug and say ‘you’re on your own,’ even though the contract pretty much does.
I’ll have to take a deeper look at the group policies options suggested here, its a very good pointer.
On some projects the backup PC has been arranged as a fallback which I really liked, and is easier to replace than an image of the hard drive.
In general plenty of very handy nuggets here. I encourage folks to chuck in their two cents when if anything comes to mind. Ill do the same.
H