Device restrictions

Source: https://docs.microsoft.com/en-us/intune/configuration/device-restrictions-windows-10

You can set some setting for:
App Store
Cellular and connectivity
Cloud and Storage
Cloud Printer
Control Panel and Settings
Display
General
Locked Screen Experience
Messaging
Microsoft Edge Browser
Network proxy
Password
Per-app privacy exceptions
Personalization
Printer
Projection
Reporting and Telemetry
Search
Start
Microsoft Defender SmartScreen
Windows Spotlight
Microsoft Defender Antivirus
Power Settings

Some ideas:
Name: Win10 | Device restrictions | App Store
Use private store only | Allow (Works only with Enterprise Licenties)

Name: Win10 | Device restrictions | Power Settings
Battery
Battery​ level to turn Energy Saver on | 20
Lid close (mobile only) | Sleep
Power button | No Action
Sleep button | Sleep
Hybrid sleep | Disable

PluggedIn​
Lid close (mobile only) | No Action
Power button | No Action
Sleep button | Sleep
Hybrid sleep | Disable