How to restrict internet access to a user account?

[Audiofight]

Trying to setup a PC that is locked down tight (already complete) and can access only certain URLs on the internet.

Obviously, using the "restricted sites" setting is not an option because there are nearly infinite URLs out there to keep adding.

I want to add 2 URLs to a list and have them be the only two that are accessible by a locked-down user account.

Anyone have an idea how to accomplish this?

 

[n0cmonkey]

You should be able to do it with a centralized firewall. Maybe with a software firewall on the sytem, but that's typically easier to get around.

 

[Audiofight]

Anyone know of a good way to do it with Windows XP?

I guess a little more information will help to shine a light on what I am trying to accomplish.

This will be a public internet computer inside a bank. I want to restrict internet access to only 2 URLs that will be used to conduct business and no access to any other URL typed in manually. I want Microsoft's website banned here.

The SP2 firewall won't accomplish what I want and I am hoping to avoid having to buy additional software to accomplish this, but will resort to that if I have to obviously.

 

[Audiofight]

An easy way to prevent most users from accessing URLs that I don't want them to:

Set DNS to 127.0.0.1 and then edit the Hosts file to reflect the IP == Domain Name that you want for all approved websites.

Combine that with a fully locked-down desktop that repairs itself every reboot........you are all set.

Sure, someone can punch in an IP address and browse whereever, but how many IPs will most people remember?