An Azure service that is used to automate, configure, and install updates across hybrid environments.
I tend to leverage Azure Policy for consistent enforcement and Custom Script Extensions for remote installation and automation. Azure Policy combined with Machine Configuration tends to work fairly well.
Another approach involves tools such as Ansible or Chef, especially outside of the traditional Microsoft endpoint management ecosystem. Ansible playbooks can be used to push software packages, enforce desired configurations, and manage ongoing updates for Arc-enabled servers.
For traditional Active Directory-joined Windows environments, you can rely on Group Policy.
If the above response helps answer your question, remember to "Accept Answer" so that others in the community facing similar issues can easily find the solution. Your contribution is highly appreciated.
hth
Marcin