Windows System Admin work

below list of things need to be done for our client . Expect 20% change

AD Tier Model access setup on domains.
SMB over QUIC setup ? Pros and cons of legacy OS
Multipoint Failover cluster domains.
Firewall setup on the entire network (secure ports and network access)
Group policy approval setup.
Add and migrate File/Print server with the same as an existing server’s user’s privileges to new servers.
DNS over https, TLS 1.3 for remote access web portal
TCP HyStart++ setup to reduce packet loss during connection start up) (SSL VPN client)
All Office/remote Users – Roaming profile on One Drive
DRTM (Dynamic Root of Trust Management) and DMA (Direct Memory Access) on Physical servers

Servers/services to migrate/upgrade.
DHCP fails over setup on DC1, the primary DHCP server on DC2.
FS2(file server) will be migrated to a new server(UWD-FS1) (DFS/cluster fail over) -Please advise.
FS3(file/Print Server) will be migrated to a New server (UWD-FS2) -Please advise.
Domain controllers fail overs.
Group policy is reconfigured with tight security/access.
all user Email signature will be automatic setup from AD Details.
Password policy setup 15 characters, auto login password for production computers, local admin password change from Domain GPO,
O365- restrict email setup on mobile for some users, Mobile restriction.
PKI certificates configurations.
Documents for all services for future ref.