Permit Remote Access on a Per user basis

I would like to give a user remote control access in terminal server 2003. I
would like to limit this to just one user that is not an administrator. From
what I read, you edit the "sets rules for remote control of terminal services
user sessions " in the local computer policy - user configuration -
administrative templates - windows components - terminal services. How
exactly does enabling this policy limit this for the one specific user. Once
this policy is enabled, is the remote access controled on the per user basis
in Active Directory users and computers in the remote access tab of the user
properties?

Thank you in advance.