|This is not a networking issue but a GPO issue. You will need to make a OU for the group of people you want to have the ability to install software and make sure the OU will not inherit the other GPOs by turning on the Enforced. Then simply add the users to this group.|
I recommend against this though and would rather setup one user who has installation GPOs set and only use that user for installations (unless you have a bunch of admins that you want to audit and keep logs of who installed what). This way you can simply change the password for that user after every use to prevent it from being used in the future without your permission.
If you want to be able to install programs through a log on script this is a different story because you can use the RUNAS through scripts. I my self am still trying to figure out how to do it. GPO supports MSI distributions but not EXEs.
You might be better of posting this in the Windows 2003 Server thread of this forum.