Configure GPO to allow 1 user and 1 IP

Hi All,

I need to setup a GPO on a Windows 2008 domain to do the following;

1. Allow a specific user (Not a domain admin users) to remote desktop to 5 computers on the domain but only from a specific computer (Fixed IP) 

2. Remote Desktop should be disabled on all the rest of the domain computers except the 5

3. Users should also not be allowed to add remote user to a local computer.

Thank you in advanced.