Two added tips:
If you have your IT guys make a gold standard up to date "root" level install with all the software properly loaded that everyone will need for their basics then that can be captured as an image with Acronis or other cloning software and used as a base to clone from should someone's SSD get damaged/lost/corrupted. I start with the HP supplied Restore media because that will place the HP OEM COA self-activating serial number on the root level install. That can run in another same-type Z440 also. We keep the physical original untouched and boot from it every couple of months and run MS Updates and any other root level updates we need, and then capture an image from that for use in future root level cloning.
Second, the staff needs to know to always fully shut down the workstation before swapping in their personal drive.... I made this mistake myself. The workstation had gone to sleep, I did not recognize that, I swapped in my boot drive, and touched the keyboard. The workstation awoke with my partner's info partially in its sleep memory and my drive started working with that. Needless to say my boot drive got corrupted and I needed to go back to our root cloning image. Tip one above saved my bacon.