Sccm finally solved the problem of users installing software.
Finally, the problem of user installing software is solved.
It has to be changed to yes, or you can only send software to the device, not to the user.
Https://www.petervanderwoude.nl/post/preventing-user-targeted-applications-and-policies-on-specific-systems-with-configmgr-2012/