Restricting Login by Client IP Address

Is it possible to configure a user account’s settings so that the user can only log in from machines with certain IP Addresses?

I know very little about Windows NT/2000 server administration, so any answer given must be fairly detailed to be useful.