Restricting Internet access by LAN IP

Allow certain computers to reach only certain websites

[MatthewHSE]

I'm helping set up a network on which the Internet access of two computers is to be restricted to a short list of about thirty websites. The LAN is using standard wired switches and a DSL connection with a wired router. I'm assigning IP addresses manually to each computer on the LAN. Two of the computers need to have their Internet access blocked entirely, except for that list of about thirty sites.

Two methods of accomplishing this have come to mind:

1.) Router configuration. Unfortunately, however, the router they bought doesn't have the option to restrict certain computers to only a few sites; it can only block all access for specified LAN IP's.

2.) HOSTS files on the two machines in question. In this case, what do I use in the HOSTS files to accomplish this object? Also, can Windows 2000 non-administrative users edit a HOSTS file?

Any ideas on this will be most welcome. I'm not getting paid for this particular job, but I still have a thing about getting the result the customer wants! ;)

Thanks,

Matthew

[kwngian]

Yes, edit the HOSTS file and also remove their DNS servers settings just to be sure but non-admistrative role cannot acheive the second portion though.