The problem with these users is that they are going to be logging into 2 different type of machines.

So I need 2 different setups, and the big issue is that they are going to moving around, even to the extent where and what they are doing each day. This means I can not exlude them by user or group.

The downside of users have multiple work functions.