Preventing Users from Installing Apps

Our users are on Windows 2000. Select users have been given local administrator privileges so that certain applications will work on their PC e.g. Palm Hot Synch Manager. Granting full access to the application folders alone (at a file and registrylevel) didn’t get them going – only when local admin rights were granted. Users have discovered, however, that they can now install any software on their PC. Is there a way to disable them from installing software short of removing admin privileges? Is there a way to run Hot Synch Manager without granting admin privileges?