Offline
1. config\policies\security settings\local policy\security options\user account control
2. computer config\policy win settings\security settings\software restrictions policy\security levels\set to basic user
3. user config\policies\admin template\ windows components\windows installer\prevent removal media source for any installation