Well that's pretty straightforward - whichever username you're connecting with, make sure it's a member of that group (or an Administrator).
I'd switch the firewall back on, on the XP VM by the way and just make sure you're allowing incoming port 23 connections.