Hybrid User profile in Win2000

Has anyone figured a way to make a hybrid desktop user or the best profile for users that can’t have administrator rights, or power user rights, but need a little more than standard user? The Domain controllers are Win NT 4.0.