w2k pro software install rights

i want to give a user or group (doesn’t matter) the right to install software only. i don’t want this person to be able to change network settings or hardware config, just install software. i can’t find it in local policy settings… so help?
thanks!