Giving Privilage to Active directory domain user to install certificate

Hi,

We have an shared Active directory server with 10 OU for different project ( all user are domain user )

We need to give limited privilage to users of a particular OU to install certificate when accessing web application in windows 7 client. Please advise the best solution without giving admin access to users.

Thanks

Arjun

Arjun