2000 Software Installs

Okay, here is the problem I’m running into: I don’t want users to install unauthorized programs. So I don’t make them Local Admins on their machine. But when I need to install software on a local machine I’ll either use the run as command or the domain administrator account. But if I use either one, the install goes into the administrator profile, and most of the time the registry applies for the administrator profile. What is the best way to keep users from not installing programs they are notallowed to, but if I do need to install a program on their machine, I won’t have an issue with profiles or the registry?

Thanks
Ali