XP pro rights
 

Once again I turn to the tfp community in need of assistance.

[STORY]
We have a family computer at our house (yes I still live with my parents, something I hope to rectify soon) with Windows XP Professional. I tried my hardest to get them to use Linux, but they hardly know how a mouse works so I kinda let it slide.
Anyway, I installed XP pro and set up accounts for everybody, my mom, dad and lil sis. I set myself as mod and the others as plain users, didn't want them snooping around.
[/STORY]

[PROBLEM]
Now I have a problem, my dad uses a piece of software that requires administrative rights (lord knows why) and my sis needs administrative rights to access a chat site (ugh) that runs a Java applet (www.tmf.nl, the chat area).
[/PROBLEM]

[QUESTION]
So does anyone know how to grant a user administrative rights on one program and one website only? Surely there must be a way... I've been looking but I can't find anything.
I really don't like the idea of my dad and my sis (my sis doesn't even have a passw and likes to swap nice lil progs with her friends :() having admin rights.

nope.... only solution... power user rights.

for the java chat applet... make her use IRC and set it up so that it goes right into the chat room she's using.

for the father.. power user rights.

You need to determine why those applications need Admin rights. If it's just to the file system you can grant the user those rights within NTFS. If they need access to the registry, you can do the same.

As cynthetiq suggested, you can give them Power User rights which provides more access to the registry and file system without compromising security for everyone else.

What sort of Java chat application requires Admin access???

I have a question: if this is a family computer and doesn't have your own data, does it matter if they "snoop" around?

group policies man

IMHO people should always use "limited" accounts unless they specifically need admin privileges for a particular purpose. This closes a lot of security issues.

Thanks everybody for the power user idea... that was it... can't believe I overlooked that.
They still have a lil bit too much rights for my tastes though. But I guess I can just go tinker with the poweruser policy. Personally I first learned all about group policies and user accounts for an OS with Linux, so I feel reluctant to hand out administrative (root) accounts to just about anyone.