Want to help your users when there is no rule in place, and maybe no Internet? It's easy. Use Admin Approval to help users install applications.
Learn how to set up Admin Approval mode.
Want to trap and require users to request permission when installing anything? Then use this setting; plus how to work around the byproduct of this setting.
Enable your advanced developers and users the ability to self elevate applications, instead of having rules which always apply.