It's not as good as SELinux but you can limit the rights of admins with group policy so that they won't be able to install random drivers in the environments yo

It's not as good as SELinux but you can limit the rights of admins with group policy so that they won't be able to install random drivers in the environments you speak of that need that boundary.