For volume license customers, you can use the offline installer with a KMS (Key Management Service) inside your network so that even activation never touches the internet. Microsoft provides specific ADMX templates for this.