Offline
Computer configuration/policies/window setting/security setting/local policy/security options/user account control: detect application installations and prompt for elevation/ enable
this works but browsers can still be installed.
User configuration/policies/window setting /security setting/software restrictions policies/ security levels/ disallowed
this blocks all software but you can still use some that are built in like Microsoft edge.