Block Users ability to install programs

How can I block the users ability to install programs on their Laptops? If they are admins on their local machine? Should I change them to power users instead?