set up policies

This should be a very easy question for someone….just not for me!
I need to set up a policy for a couple users that will be loging-in at a publicly accessible WinTerm device…things like no run command, no network places on desktop, and so on. I’ve looked at the group policy snap in, but it didn’t appear to be real obvious how to apply the rule to just 2 out some 50 users. Thanks for the help!