Allowing user to install the application can be risky in co-operate environment we do this for the purpose of security .
Application can Only be installed with administrator rights .
Go to search and type gpedit.msc ,
Select this which is showed here and click on editing
Choose enabled option and click on shows mentioned below
Specify application which you want to block , In my case I have blocked ccleaner setup
Click on ok and apply
You’re done now