Read more on https://www.thewindowsclub.com/how-to...
You can if you wish, restrict users from installing or running programs in Windows 10/8/7 as well as Windows Vista/XP/2000 & Windows Server family. You can do so by using certain Group Policy settings to control the behavior of the Windows Installer, prevent certain programs from running or restrict via the Registry Editor.
The Windows Installer, msiexec.exe, previously known as Microsoft Installer, is an engine for the installation, maintenance, and removal of software on modern Microsoft Windows systems.
This guide will show you how to block installation of software in Windows 10/8/7.