1) Intune works rather well if you are using O365.
2) Honestly most "monitoring" tools like that are invasive as all hell. If you are providing the machines they are working on, then there are some to look into. If you are not, you don't get to put anything on them.