In win2k pro, we want to allow several of our users to have restricted user rights (not be able to install anything for example), but also be able to make certain changes, like specifying IP addresses for when they travel to different places. How do I make a user group that has these types of rights?