you can make 2 global groups,for the two domains then I suppose you have, and you put the users in the groups. lets pretend the groups are A en B. you can write in the scripts then:

if INGROUP(A)
....
endif
if INGROUP (B)
....
endif

I'm not sure if this is a solution for you, because your question wasn't so clear. In the second way you should check your policies, you can also make two global groups there A en B with different rights referring to the network privileges.

Seaman