Prevent Users from Installing Programs (they have Admin Rights)

Hello,

I have a small situation. Users have local admin rights because a few programs require this permission setting for them to run properly. Usually they are database programs. I find it difficult to restrict them of installing programs on their own since they have Admin Rights. What is worse they can theoritically run Password Recover Programs or worse, LC4. I know I can probably set permissions at the Registry Level for that specific program, but is there a more effecient way of doing this?

Thanks.