M365 Desktop Apps Reporting and Compliance

Using MECM 2203. We have deployed the M365 desktop apps to our estate using MECM but now we are looking to report on the versions out there and what patches have been applied etc. We currently allow them to patch directly form the CDN. How to achieve this?