Creating security templates in Windows 2000?

[dovesm]

I would like to set up 4 different users on a computer that all would have different "rights". For example, log in as a restricted user and you will have a certain color desktop theme, no Run command on the start menu, cannot install programs, etc. Log in as a power user and you will have a different color desktop theme, you will have the Run command, cannot install programs, etc., etc. From what I have read, to accomplish this I will need to create seperate security templates and assign users to each. I don't know where to start - please help.