We have a site where there is a mix of Windows 2000 and Windows XP machines. These currently have user accounts with Admin Rights which can install licensed/unlicensed software. We want to restrict such activities so that,
- Users can install / uninstall pre-approved list of software.
- Users are given unrestricted access to all other system resources (All Admin rights apart from software installation).
I am looking for a way to achieve this using any MS or third-party tools. All suggestions are welcome.
Edit: Given these challenges, what would be the recommendations?