Looking for a W2K Internet access/privileges utility

[manly]

For those of you who get Internet access through a router, how can you control software access to the Internet in W2K?

I know I can remove Execute permissions on a binary, but I don't think this would work for IE.

I would have hoped one of the popular software firewalls also takes care of this issue, but I haven't seen so yet. Or can ZoneAlarm assign application network privileges at the user level?

At this time, I'm not really interested in Net Nanny or similar. In short, some users can have unfettered access to the Internet, but I want to restrict such access to a particular user account.

 

[bunker]

I know you can tell Zone Alarm what progs have access, but I don't know about the user based.

 

[manly]

All right, I actually found a way to lock down IE:

http://searchwin2000.techtarget.com/tip/1,289483,sid1_gci778764,00.html

Basically, IE is configured using with registry settings to use bogus proxy settings. And the user is disallowed from changing those settings.

Unfortunately user accounts don't have the permissions to alter the keys in:

HKEY_CURRENT_USER\Software\Policies

Short of temporarily elevating that user into the Administrators group (which isn't difficult), how can you work around this issue?

 

[manly]

Note that the original question still stands:

If there's a simple way to configure a user account to have no TCP/IP Internet access, that would be even simpler than manually configuring permissions for separate applications.