Windows System Administrator | Secure Company Laptop Setup | Microsoft 365 | Google Workspace

Windows System Administrator | Secure Company Laptop Setup | Microsoft 365 | Google Workspace Project Overview MESE Transport LLC is looking for an experienced Windows System Administrator to configure a newly purchased Lenovo ThinkPad T14 Gen 2 for a remote employee. This is a company-owned laptop. The primary goal is to ensure that the employee can perform their job while MESE Transport retains complete administrative control over the device and company data. Objectives Configure the laptop so that: MESE Transport maintains full administrator control. The employee does NOT have administrator privileges. Company software can be installed and managed only by the administrator. Company data remains the property of MESE Transport. The laptop can be remotely managed. Access can be immediately revoked if employment ends. Company data can be remotely locked or wiped if necessary. --- Required Tasks The selected freelancer will: Windows Administration Configure Windows 11 Pro correctly. Create separate Administrator and Standard User accounts. Remove local administrator privileges from the employee account. Configure User Account Control (UAC). Security Enable BitLocker encryption. Configure Windows Defender security. Configure Windows Firewall. Enable Secure Boot and TPM if available. Configure Windows Hello and PIN policies. Remote Management Recommend and implement the best solution (Microsoft Intune, Microsoft Entra ID/Azure AD, or another business-grade solution) so that MESE Transport can: Lock the computer remotely. Disable access. Remove company access. Wipe company information if necessary. Manage future company laptops. Google Workspace Integration Configure: Google Workspace login Google Drive Chrome enterprise profile Shared Drives Security policies Software Installation Install and configure: Google Chrome Google Drive for Desktop DAT One Truckstop Adobe Acrobat Zoom Microsoft Office (if applicable) AnyDesk or another approved remote support tool Device Policies Configure policies to: Prevent unauthorized software installation. Prevent disabling Windows Defender. Prevent removal of BitLocker. Prevent local account creation. Disable unnecessary Windows features. Documentation Provide complete documentation including: Administrator credentials (to MESE Transport only) Recovery procedures BitLocker recovery key location Remote management instructions Future laptop setup checklist --- Required Experience Please apply only if you have experience with: Windows 11 Pro Microsoft Intune Microsoft Entra ID (Azure AD) BitLocker Windows Group Policy Endpoint security Google Workspace Administration Small business IT management --- Deliverables At project completion, I expect: Fully secured laptop Administrator account under MESE Transport control Employee account configured Remote management working BitLocker enabled Written documentation Screen-sharing session demonstrating how I can: Lock the computer Disable the employee account Remove company access Recover the device Add future employees