Is there a way to append characters to the beginning of a username at login?

I am running into problems with the user OU's and Terminal Server. The users have normal desktops and also login to Terminal Server. The Terminal Server is in an OU and computer policies are applied to the computer. The user policies do not get applied because the users are in a different OU. Only the user policy at the user OU is applied, not the user policy at the Terminal Server OU - it is based on location of the user object. If I move the user to the Terminal Server OU, the users normal desktops are modified.

I'd like to have two accounts for users that have access to the Terminal Server, one in their normal OU for their normal desktops, and another account in the Terminal Server OU for the Terminal Server session - WITHOUT the user having to know this other login.

Possible solutions?
Move user to TS OU at login? Requires elevated rights.
At login to the TS, append 'ts' to the beginning of the username and login using the account in the TS ou for the user.

Any other suggestions? Thanks!

tjcarst