Is there a specific setting I can push out which will prevent them from
installing apps?

I am not very familiar with all the Windows policies.

Thanks.