You can, if you wish, restrict users from installing or running programs in Windows 11/10 as well as the Windows Server family. You can do so by using certain Group ...