Preventing access of restricted operations from group policy

I am running a WIN2k network, servers and workstations. Is there a way through group policy to prevent users from being able to perform some restricted operation like update salary or update employee address details in a C# windows application. I would like to beable to do this on a domain level instead of individual pc’s.