Use group policies to whitelist the browser(s) that are supported. Do not allow users to install new apps.
At the firewall or router block access to the site(s) you don't want to access, or vice versa. How you do that depends upon your firewall software or router hardware.