arnold:You could configure a local security policy to allow rights elevation for installation of software.
Local security policy object
computer configuration\administrative templates\windows components\windows installer\
user configuration\administrative templates\windows components\windows installer\
in both:
Always install with elevated privileges - enable
Note that some can take advantage of this setting to elevate their own rights on the system to perform other tasks including adding AP networks to the wireless card.
This setting will allow a limited user to install software on the system while making it somewhat more difficult for them to alter the method by which their system connects to the net.
Once you set this policy, you can copy the configuration which is stored in:
c:\windows\system32\GroupPolicy windows XP
And copy the contents to the other systems.
A similar location for windows 7 exists, but do not have it at hand.
c:\windows\