Stoping Downloads (NT)

I want to stop software being installed on the NT4 clients. But the users (Helpdesk Engineers) need to install software. But only authorised software.

Is it possible to stop installs…BUT allow installs if they are taken from a specific folder.