title: On Windows XP: How to create a user with read access to only one certain directory?
body: <p>Let me state first: I know that any user that wants to run a program (or even log in), has to have access to (probably at least) the Windows system directories and the shared libraries in <code>%ProgramFiles%</code>, but I'd like to be able to access Skype, for example, by running it with an unprivileged user and make sure that it can't access <em>any</em> unnecessary files.</p>
  
  <p>I fear that the only way to do this would be to identify all of the gazillion directories where I store files that I don't want this user to access and then create a new user group that can access these directories, or run Skype and Azureus in a VM.</p>
  
  <p>Is there a better way?</p>