We are running Small Business Server 2003 with Windows XP Pro clients. I have all of the workstations locked down with the User profile. I have one user who needs the ability to install programs on his machine. I will not make him an admin because he will have acccess to network shares that he should not. How can I give this user access to install programs? Group Policy?