user account restrictions

[michaelnorman]

recently at my church I have finally got approval to install av software on the media computers...

now my next mission is to get them connected to the Internet for updates and to be able to play youtube videos etc. I want to be able to lock down a user account so the internet browsing is disabled but you are still able to have some internet functionality to present youtube videos and share files, other wise I would just disable the network card. Also how is it possible to prevent any other software being installed on the computer as well it is on a windows xp machine and im not familiar with the network settings on it. i will also make a admin account that has internet browsing enabled and being able to install new software.

Does anyone know how i would be able to do this as i have no idea as im more familiar with win 7 and vista

[[Director] Joseph B]

In my case this was easy - I use a usb wireless device to connect to the internet - when I'm not using it, I keep it locked up.

[[Admin] osborn4]

I know with my iBoss, I can set a white list, so that you can ONLY go to the listed sites. I don't know if you can do that with OPENDNS.org or not.

To be able to show youtube videos and such, you will still be using the same web services that are used by web browsing. So it's not as simple as disabling a service or blocking a port.

[Mark Finley]

what about http://www1.k9webprotection.com/ ? just list the approved sites ,and everything else is blocked by default