Hello. What you’re asking for is a very specific setup. Windows doesn’t ship anything that matches your checklist and most non-enterprise, off-the-shelf tools lack this design.
However, solutions specifically categorized as File Integrity Monitoring (FIM) or Security Information and Event Management (SIEM), such as Tripwire, Qualys FIM, SolarWinds SEM, OSSEC, and Wazuh, are built precisely upon the client agent plus central server/console architecture you are looking for.
What exact Windows versions are those remote machines running? The mix of Windows 10/11 editions or Server builds affects which remote-management methods will actually work.