Is is possible to prevent users from installating software applications via some GP setting, even if the user is in the local administrator group? Thanks