GPO - User, stop users from installing software

Set up new windows 7 gpo one for users and one for computer,

Want to stop users under this OU from installing software found where it is in computer policy but that stops everyone from installing stuff including domain administrators, can anyone find where it is in users,


and what other things would you implement in gpo to lock down the network for staff and students,

many thanks

You can use Item-level targeting to apply policy preferences only to specific user groups or else change the security filtering on the policy to make it only apply to certain user groups (e.g. Students). You might need to split your policies into smaller parts first if you've got large, all-encompassing policies.