Best Practice to Prevent user installing apps on Windows / Mac

Best Practice to Prevent user installing apps on Windows / Mac

i've tried following these 

We can try the below registry keys via registry settings configuration and update us on the status.

*HKEY_LOCAL_MACHINE\Software\Classes\Msi.Package\DefaultIcon*

Value: 0 to a 1 to disable Windows Installer.

but this case not solve, and following this link also as support give me solution 

https://www.manageengine.com/in/products/desktop-central/help/inventory/block_executables.html

no One solve. 
if anyone has experience at this case, please share with us
                New to ADManager Plus?

                  New to ADSelfService Plus?