System Center Configuration Manager’s (SCCM) Desired State Configuration is exactly what you’re describing.
If you have no budget for this (like your question makes it seem) you can leverage PowerShell DSC instead.
System Center Operations Manager (SCOM) doesn’t factor in here- it’s a monitoring and alerting platform, not a configuration management one. (Note that the original question asked about SCOM but the OP edited it out)
Note that since 2012, when you buy one System Center product, you get them all. There are 9 total and they are a big boon to Windows shops that can successfully leverage some or all of them.