as longhair said....make 2 groups & 2 polices and then each should have a login script.
If ur worried about some users already having mapped drives then u can use something in line of:
--------------login.bat---------------
net use f: /del >>C:\login_error.log
net use f: \\Server\share /y >>C:\login_error.log
---------------------------------------
in other words it would delete users' mapped drive letter F to whatever they might have mapped out manually and then re-map it to your desired share...while making a log file on their C drive
...many here will arguee that .bat files are better repleaced by VBscript based ones IF u use Only win2xxx stations and servers....
All the best!
:--------------------------------------------------------------------------:
All around in my home town,
They tryin' to track me down...