Block or Prevent user for installing any software without administration permission

Hi,

I assume you want to restrict installing software on windows endpoints?

If yes. For a good start, use applocker. the zip contains a simple powershell script and a json file (with the applocker exe config in it)

https://call4cloud.nl/2020/06/applocker-a-la-minute/

And a blog about the whole adminless process if you are interestedted

Dude, Where’s my Admin? - Call4Cloud

And how to do it manually

Configuration Manager as a Managed Installer with Windows 10 | redkaffe

https://techcommunity.microsoft.com/t5/intune-customer-success/support-tip-using-applocker-to-create-custom-intune-policies-for/ba-p/364981