Setup guide for Privileged Access Workstation on Windows 10

I am setting up a Privileged Access Workstation (PAW) to access a whitelist of websites. Currently I have been following this guide on Github by unassassinable and applying the latest Windows 10 security baselines.

  1. Is there any documentation or guides that are focused just on securing / hardening a Windows 10 install for whitelisted website access and without Active Directory.

  2. Can Windows 10 Pro be locked down sufficiently or is Enterprise required to truly harden a system

  3. Which browser is best for this job? I was expecting to use Chrome with Group Policies set to lock it down.