You can disable the Microsoft Store app to make sure users don't download extra apps beyond the apps you've already provisioned for them.
To disable the Store app:
Create and edit a new Group Policy Object.
Select Computer Configuration > Policies > Administrative Templates > Windows Components > Store.
Open the Turn off the Store Application setting.
Select the Enabled option.
Click the Apply button.
Click the OK button.