mpd+freeradius+AD

Hi all! I have completed setup of mpd+freeradius+AD 2003. Now my users authenticating from Active Directory, if they are members of specific group. But I still have some questions: 1. How to make a different timeouts for different groups in AD 2. How to appoint special IP for special users 3. How to restrict users to access only to defined IP in my network