[jimnotgym]

Well short of running your own home server and AD, you can join it to Azure AD and try Intune? Haven't used Intune to control patching myself yet.