How to use Group Policy

Hi. We have a Windows 2000 Server running Terminal Services. We would like to be able to keep users from installing programs, changing settings, modifying the registry, etc. The Terminal Server is not a domain controller. When I change the settings in Group Policy on the server, it affects every user….even the Administrator. Is there a way to be able to specify which users the policy applies to?