Outlook owa pwa is 99%

The rest of the apps sans access work 99% in wine.

Google docs works great

Run NixOS don’t give em root or nix-shell. They can’t install anything you don’t allow.

Put each users allows softlist into source control. Make the boxes cron and reconfigure on demand.

Tailscale VPN.