Have users launch the installer package directly from the network share. They'll need at least read permissions to the network ...