Jonathan, we use Macs for desktops, but the principles are the same.
We have a standard software set for 90% of the staff. So we maintain a image of this standard set and do automatic backup of all the data and settings on each machine. Incremental backups are done hourly, daily and monthly. We specify a backup location with a maximum size for each user (100Gbytes is ample for our use). The remaining 10% we do the same thing with two exceptions:
- Backup to a different location with a much larger maximum size (500Gbytes)
- We decide whether we need a separate image and if so, create and maintain it.
Anything sensitive or needed for continuing operations is stored in a Class 5 cloud server room that has the data replicated in another state or country, or is put on our server. Our server has both an image backup, incremental backup and a copy that is stored offsite. Our server room is pretty impervious to disaster, but should the hardware be affected these offsite copies allow us to get the local server and services back online really quick.