Allow specific computers and / or users in a domain to run software from a authorized directory.
In this video you see how to configure very specific restrictions by an easy way in an enterprise domain.
Authorize a user group Accountants with a standard domain account to install software
on their own computers in the computer group Financedepartment
from a specific network share.