Also see Fleet (https://fleetdm.com/) for an open source self-hosted solution. I'm currently using this at a small company to query / enforce policies across a bunch of Windows laptops.