Group specific desktops/restrictions

I am looking to provide different nt user groups (active
directory) with unique terminal server
desktops/restrictions. I would like to add a user to group
x,... that user would log onto a terminal server (2000
advanced), and have their desktop and restrictions in
place. Different user groups would have different
restrictions/ and desktops.

The group policy editor applies to all users on a server,
and so will not work in this scenario(it seems).

Any pointers on how to accomplish this goal short of using
permissions on individual files?

Thanks.

That was just the tip I needed. Thanks.