I'm pretty sure you can do it using the policy editor (i.e. by creating a security policy for a specific user). The utility is called POLEDIT and comes with NT (I think it's in the ResKit directory on the CD but I don't have an NT CD to hand). You can also download the utility from Microsoft.
This tutorial might help for further information or just look on microsoft.com for the white paper.
http://www.wown.info/j_helmig/poledits.htm