[rabidrat]

Generally these rules are institutional policy which are there for legal or security reasons. In a 1000-person organization, preventing 990 of them from installing malware is more important than allowing 10 of them to be more productive. A middle-manager does not have the ability to change that policy.