Windows 2000 Local user security

[SystemDown]

I'm looking to only allow the Administrator's group to install programs on a Win2K Pro machine, I would like to restrict the power users group from installing programs. I need to do this at the machine (local) level and not at the Domain level. Any help?

 

[abrannon]

If this PC is a member of a Domain, then Local policies will be overturned by Domain Policies. You may be better off creating a group policy with a ACL for just that PC.

 

[SystemDown]

This client does not use Group policies and most likely never will, so I must do this at the local level.