I like the preset rule in SEPM Application Control to block software installers which would stop installation of software that bypasses the UAC (such as Chrome, Firefox, etc). However, I don't like not having the ability for administrators to bypass this feature. Is there a way to configure the rule to allow administrators to enter their password and bypass the block?