Hi, as far as I can see, there isn't a way to lock down user profiles in a practical way builtin - to prevent installing software or connecting to wifi/cellular without a vpn due to the user having to first open the owner profile, where they can grant themselves rights to install software. I am researching whether I can reach the following outcome:
User has a single profile that they can use (not owner) where they can only use preinstalled software & the network connection is forced through a corporate wireguard vpn.
Is this achievable? Even if it requires 3rd party apps.