Disallow Windows User Accounts Installing Software

Locking Down Windows User Accounts
InstallGuard will disallow users installs.
 (Get it from a 3rd party site. The developer
 site has some odd stuff going on. It is free.
 To uninstall you must go into file-exit first.)
You can white list the admin account.

 RollBackRX (free) will easily allow returning
 system to previous state.

I am trying both of these currently so work in progress.