Current setup:
Lots of .exe (and other files) are packaged inside an MSI installer (using WIX) which installs the exe files in ProgramFiles directory. Bootstrapper exe is normally used (it installs prerequistes) and launches the MSI installer package. Installer package is usually started from network share (access to which can be controlled on user/group basis).