Every company has a list of programs allowed on their machines to help staff get work done efficiently. This list of approved programs can be installed and run on anyone’s machine. If an employee tries to install something like a coupon program on their work machine, they would not be able to unless that program is on the allowed list of programs for the company. The same situation applies if a virus tries to install in the background on a computer. The installation would not be completed because it was not on the list of approved programs that can be installed.
Having this layer of protection prevents employees from installing anything they want on their work machine. While people usually have good intentions, installing unapproved programs could contain malware that infects the network. By locking down admin controls of installing unapproved programs on the network, the network is kept safe and secure.