Restricting user rights

I have an environment that has remote users running an XP portable and dialing into a W2K network that does not have AD deployed yet.
I have createrd a local group in the image on the clients and allowed them access to install drivers (for adding devices) but need to also allow them to install software without making them admins on the local machines
AN IDEAS OR EXAMPLES????????