Exclusion in GPO

on my Win2k Domain, i have about 100 Users in a OU “grade1” GPO is applied to this OU such that only excel.exe iexplore.exe & notepad.exe are allowed for this OU. but there is one user in this OU to whom i need to enable calc.exe. i don’t want to create another OU only for the sake of one user. i want only this user out 100 users to use calc.exe in the same OU.