You have policies that allow users to download and install stuff