prevent users from installing software in Windows