Please don't cross post. Other one deleted.
What do you mean by xp user? That doesn't really make sense to me.
If a user does not have rights to a database, they can't use it. They need limited rights to master to login, but they don't need rights to msdb and shouldn't.