You can publish or assign applications via a Group Policy Object and RIS.
Since an OU can be managed by a GPO, you can control who gets what,
distribute patches and even mark an application as out of scope, etc. There
are a bunch of issues you need to deal with like whether the application
supports msi scripts and so on (including workarounds as well).