I want to deny users the access to install but allow them to run legacy programs. Currently when our users try to run programs such as Microsoft Photo editor it will not let them if they are in the users group. But when I put them in the power users group they can run all of the programs they need and have "which is different per user" but they can install some programs. How do I give them program access but not install access?
Thanks
Thanks