I don't give local admin rights to users, even from IT department, even I. So users can NOT install or remove applications.
Also it's a rule for MORE security ... Even you can also use LAPS in Microsoft environnement : Local Admin Password Solution for change password