What's the best way to have a WinXP limited account only able to access a website/domain (and any it uses) that the admin sets? I've tried using XP's built in proxy in the past, but it just wouldn't work sometimes, even if I allowed the whole domain.