Policy

I have a client who is asking if it is possible to create a policy that controls the desktop by individual user. My first impression was he would be required to have a domain and not a workgroup. Second, that he would have create a group, apply the policy to the group and add the user to that group. Can you provide me with additional details / links to “how to” sites that can help me make policies like this run?