What you want to do can be achieved with windows autopilot:
Hope this helps!
I want to have users sign into a new computer with their email and connect to our Azure AD. The users when they first sign in have admin access.
Is there a way so that when they first sign in they are just standard users?
How do I configure or setup the device before hand?