password

Is there an effective way to let only the adm make installations on win2k. It seems not to work for me as many otheres who arent adm. can also install whatever they want despite -password.
Thank you.
NB: I used to control this well on NT