Configuring Windows 10 via GPO

Hello

I’d like to configure my Windows 10 to have zero unannounced installations. That is it must ask user or admin, first, regardless of what it’s installing. 

Secondly I’d like to set the internet traffic in / out to zero bytes unless either  initiated by user or admin or approved by user / admin.

I’ve spent a few days looking at individual policies and got pretty close but I’ve had to reinstall now cause Microsoft Security would not load at all after setting the previous set of rules.

If posted in wrong thread, please advise. Thank you for reading my help request