Dear All,

I create OU to prevent this group of computer to install .msi. and the setting as below.
Computer Configuration > Administrative Templates > Windows Components > Windows Installer
-Disable Windows Installer > Enabled > In Disable Windows Installer > Select Always

The problem is when administrator want to install software (e.g. Mircosoft Office 2007), it also prevent local administrator and Domain Admins to install.

Is that any solution disable user to install and allow domain admins to install.

Or

Any Policy disallow user to install any software/application, but only Domain Admins allow install the software/application.

Thank you very much.

Regards,
Eric