
2. Allow Active Directory OU delegated Admins run Appcontrol.exe without Administrative rights on the server and to show application dedicated only for his OU

Probably a misunderstandingThis is not possible because administrative rights are mandatory in order to display the list of users / groups of a domain.