Yikes!! The Thin Line Between Power User And Administrator, Broken
Mark Russinovich, one of my favorite authors has an amazing post on how a power user on a Windows 2000 and Windows XP machine can bypass the security and gain administrative privileges.
Interesting read, even if you aren't planning to try out any of the techniques :-)