To set permissions for Software Installation

Open the Group Policy object that you want to edit.

In the console tree, right-click the icon or the name of the Group Policy object, which appears as follows:
Group Policy object name [domain_name] Policy,
and then click Properties.

Click the Security tab, and in the Group or user names box, click the security group for which you want to set permissions.

If you want to change the set of security groups that have permissions on this Group Policy object, click the Add or Remove buttons to add or remove security groups.

If the security group represents administrators (who manage software for users and computers in the organization), in the Permissions box for the selected security group, select the Allow check box for Full Control, and then click OK.

If the security group represents users (who use software that is assigned or published by an administrator), in the Permissions box for the selected security group, select the Allow check box for both Apply Group Policy and Read, and then click OK.