We recently setup SCCM and we are implementing a software cleanup for all the users.
Before the cleanup, i need to restrict all users to install any software.
I would like to ask for solution (preferrably GPO or script) that i can use so that users will not be able to install any programs but only from SCCM.