Restrict Windows 2008 Active directory users to install programs on clients

i have win 2008 server on which i install Active Directory and group policy.i have 30 client which uses XP or vista.i create 30 user in Active directory.my problem is user login in any computer.i want to restrict the users to installation on other machine.The local Administrator And win 2008 administrator must have permission to install