n00b domain controller group policy question

[Fraggable]

I run a Win 2003 server which is set up as a domain controller for only 1 domain. I need to give a group permissions to install software on systems on the domain. I looked through the options in the Domain Contoroller Security Options and didn't find anything that seemed to relate to it. I even sorted it by group to see what perms admins have and couldn't find anything that related to installation.

 

[stash]

Generally to install apps on a system, a user needs to be in the local admins group. You can use restricted groups in a GPO to control what domain groups are added to local groups on systems in the domain.