Configuration Manager / intune / sccm / whatever they change the name to next is the first-party solution from MS. It has always been able to modify an existing install. Push out a fresh piece of software, reconfigure one, uninstall one, force a group to update a gpo or update windows, etc…
Most universities use intune/puppet/chef for this in labs and for deployed desktops/laptops to faculty/staff to keep things up to date and consistent.
The tool sets you’re looking for fall under a category called IaC (infrastructure as code). They allow you to define environments and add installers and configuration to those environments. Typically they require an extra network-accessable server to act as a controller for the toolset.
My personal go-to at work for exactly what you’re asking is Puppet.