If you have Active Directory, this is a great way to do it: http://www.youtube.com/watch?v=RR9b5ELaVEw
Basically you create the thinapps as exes with dat files, assign permissions using AD groups (or users), and run a simple script to populate/create icons on the users Desktop and/or Start Menu (edited in package.ini).