Where are you doing the FTP on your XP system? In Internet Explorer? Another browser?
To allow only the 2 specific users, you can use the vsftpd.allow and/or vsftpd.deny files. Easiest is to put only
the 2 usernames into vsftpd.allow. You may need to check your vsftpd config to see if the .allow and .deny files are used
and correctly set up.
You may also want to use virtual users rather than real local ones. The chroot option to lock both users into a given directory (ie their home directory) can be useful in this case too.
If both users need specific settings, use the per-user-config option.