We have a need at a location to block ALL internet access on 2 specific computers, except for manually entered exceptions. The other machines should be unrestricted.

The location uses a linksys router with built in internet access restrictions, but it is implemented half-arsed. It allows you to block internet access completely for given macs or IPs, or block certain sites. It doesn't give the option to block all except defined exceptions, which is what I need.

Machines are not on a domain, and the 2 that need the access restrictions will likely be running as standard user (non admin) accounts.

I read an article about using a fake proxy address in IE, and listing the allowed sites you want as exceptions for the proxy server. Then all non exceptions fail because the proxy doesnt exist, while the allowed sites don't use the proxy and then work. I guess that is an option, but I figure maybe someone else has some more ideas.

Bottom line is they are looking to do this without buying hardware/software to implement it, so either using the router somehow, or just using whats available in XP Pro. and its a childrens daycare center, so its not like they are worried about 4-8 year olds figuring out how to bypass the restrictions...