Group Policy is great for enforcing settings on a domain or group of users. You can also add extensions to support M$ Office, Chrome etc
extensions come as a set of .admx or .opax files. in my 2012r2 domain i only needed the .admx files.
to add this functionality to the domain copy this set of files to
Their may be a series of directories included for different languages, if you company is English only you can delete those other directories only keeping the en-us directory
find the extensions for Windows10 here
extensions for Office 2016 and 2019 here
extentions for Chrome browser here includes a great option to compare passwords to the haveibeenpwned database!