I trying to configure a GPO that will only allow administrators to install software in a domain connected Windows 10 workstation. I don't need to deploy software. I just need to stop domain users from installing software, but allow local and domain administrators permission to install software.