Local user is having admin privileges even if domain has no admin privilege

 Some times there are issues in the local computers that domain users without admin privileges are allowing to insatll programs as if they have admin privileges. this is beacuse of the GPO policy of the local computers which can be changed like below.

change this as below.

Now the system will ask for credentials.