Brian,
All of the ways you discussed will work. Another way I've had some success with is to setup a user table with their access rights but no password. On your login screen you could add a logarithm type password (possibly based on the user name)that will then point to the user in the user table to gain their access rights. If this doesn't work for you I may have some other solutions.
Here's to alcohol...the cause of ... and solution to ... all of life's problems - - Homer J. Simpson
