Im just throwing this idea out for possible suggestions while i research ...

I had this idea this morning about staff installing software.
Create a list (webpage?) of approved software (prob in the form of packaged MSI's) that the staff can access on the intranet. A 'Click to Install' link is provided that will simply install the software .. when clicked!
Now .. the (potential) issue is how to tell Windows to allow the user to install software from the approved list, but not allow anything else to be installed.