Install the latest version of Mac OS to have reached the .5 patch

Create the sysadmin account, using the default Mac sysadmin password

Install Munki from Munki Builds

Copy the ManagedInstallsStaff.plist file on the FS (/export/groups/sysadmin/MunkiPlists) to /Library/Preferences, as ManagedInstalls.plist overwriting the old version

Restart, and check that Munki is installing the automatically selected software

Once that is done, open Managed Updates and select any desired optional software

Create the new local account for the staff user, and log in as them

Set up any organizational email accounts in Outlook

Install the Toshiba Printer Driver (business.toshiba.com, 4505ac), and add the staff and upstairs copiers

Remove useless applications from the dock and ensure Firefox Chrome and MS Office Apps are all there

Add Screen Recording and Input Monitoring permissions in system preferences to allow IT staff to remotely manage machine

Setting up and using NextCloud or OneDrive

Setting up their personal email in Outlook