Terminal server (Win2K) rights

Hi,

I have a Win2K terminal server.
We don’t use AD, and cannot use it.
Now I use the local policy to take rights away from the user.
But we also use this server as an application server for certain apps.
This creates a major pain if I need to install an app or edit something.

How can I create policies for everyone who logs on via terminal server, or only for certain users without using AD.
At the moment we just create local userIDs.

Thanks in advance,

Eduard