Group policy

Im pretty fresh to the field, just took over as IT security for a business. Im having issues with users being able to download things like chrome extensions, candy crush, Facebook. The group policy requires admin credentials for windows installs. I’m looking over group policy ideas, and just looking for input. Id like for users to not be able to download anything without admin credentials. I see some people will whitelist or blacklist, but with the amount of software that …

business candy chrome chrome extensions credentials cybersecurity download extensions facebook group policy ideas input it security people policy security software task things whitelist windows