ISA FirewallClient and Group Policy

I have setup an ISA 2000 Server for firewall. It works except this one problem. When I setup a system on the network and the ISA server I have to give the user admin rights on system, install ISA client, then remove admin rights. If I do not do this for each user on the system, what ever user I do not do this for can not access the internet. Yes, I have put all users in the “Internet users” group for internet access. What I would like to do is put the ISA firewall client setup into a grouppolicy and assign it to all users. It works except for one thing, the user has to have admin rights on the local system or the client setup hangs. My question is 1. is there an easier way to do this and 2. if I am going about it right, what do I have to do so that the group policy with run the client setup as and admin?
TIA,
David