This may be what you’re looking for. Treat the system like a VDI install when you’re installing things and look for “machine-wide” installers. Also consider getting FSLogix (free from Microsoft) to put user profiles in portable containers.
Interesting article but not really what we’re looking for:
<span style="color:#323232;">This option is especially useful for computers with multiple users and for when you don't want executable files running from a user profile.
</span><span style="color:#323232;">Other than where the sync app is installed, the behavior is the same.
</span>
It’s not the installation but the configuration that is causing trouble. FSLogix would require on-prem hardware.