Group Policy: Default printer & software restriction

Hello, I've been looking for a way to do two things with Windows 2000 Group Policies:

1) Set up a group to have a specific default printer
2) Restrict access to only be allowed to execute one or two pieces of software- I guess I could do this by restricting access to only the desktop and have links to only the software needed (would this be the correct approach?)

Another thing I was wondering is if I don't use Active Directory, can I still have certain groups of users be allowed other things than other groups of users? Or if is it that if I dont use AD I can only restrict ALL USERS to the same policies (local policies)? It seems from the research that I have done that if I dont use Active Directory I am restricted to having only one general main-stream group of users where all users are affected by the changes done in the 'group policies' console.

Any help/input you could provide would be greatly appreciated.

 

Let me clarify/add some more to this...

I used gpedit.msc which gives me two areas which I can configure:
1) Computer Configuration
2) User Configuration

... I can't see anything dealing with actual "groups "... it seems that any changes that I do affect all users of this computer (not just a specific group). Is there a way I can add groups or anything of the sort?

 

Let me tell you what I'm trying to do I guess very quickly: Let's say there's four users (user1, user2, user3, user4) on one PC which is not part of the active directory. There are two user groups called Group1, Group2. user1 and user2 are part of Group1; and user3 and user4 are part of Group2... Is there a way that I can have different policies for Group1 and different policies for Group2?