The path for the policy I used is Computer Configuration\ Policies\ Security Settings\ Local Policies\ Security Options\ User Account Control: Detect application installations and prompt for elevation. It seems to work.