ZCM 10.1.3 with eDir

How I can limit list of applications than user may run on a terminal server (ms ws 2003).
I have two lists of trusted applications for two groups of users. Which method I may use to limit run applications for group1 with list1, and for group2 with list2.

P.S. I doesn't have AD.