restrict office users internet access... prevent data tampering?

with nearly 2500 posts i'm sure the answer lurks somewhere here but time is of the essence... in short i need to restrict access on three work-based [office personnel] pcs with win10 pro, i.e. create user accounts with limited access to the net plus some local folders and prevent the users from deleting browser history etc. no use paying salaries to people wandering around in cyberspace in stead of crunching numbers...
its not a matter of big brother watching over everything, its more like disciplining your children... if you get my drift
in other words just short of actively monitoring employees pc use, i would like to restrict it and prevent the deletion of usage history