Terminal Services – Remote Desktop

I have a problem. Windows XP computers and Windows 2000 Server. Running in Remote Administration mode. I want to allow two sales people to edit a database on the server, but I don’t want them to have access to other user’s home directory. I can only allow them to access the server if I give them Administrator or Server Operator privleges. Is there any other group that I can add them to, or a Policy that I can edit that will allow them access without full access to the entire directory structure. Also, I would like to not allow them to shut the server down from Remote Desktop. Thanks in advance for your input.