How to assign local machine rights w/ a network login?

How can I assign local machine rights (i.e. "modify"
rights to C:\XYZ\) via a user's network login?

We are running WinXP Pro workstations on a Win2000 /
Active Directory network. Users have roaming profiles and
do occasionally use different PC's. I would like to be
able to assign these 'special' rights to the user profile
so that I don't have to add them machine by machine. FYI:
these 'special' rights are mostly due to running legacy
applications that are not WinXP aware/compliant (don't
want to make the users 'Power Users').

Thanks,
Tim