Thanks for the responses, I might research some of these products mentioned but some of it seems cloud dependent which isn't something we are interested in.
Is anyone locking down their Mac's the the extent we have to lock down our Windows machines to? We prevent access to pretty much everything in the OS, we've broken the Start menu and locked them out of everything so all they can do is use a few apps we provide. They can't shut down the computer (unless they hard shutdown using the power button), logoff, lock, or sign into the PC. They can't right click on anything and have limited access in File Explorer.
Can you prevent access to the launch pad? The Apple menu? Log off and shutdown? Terminal?