Jack,
WinGuardPro seems to be a very useful utility, and I have downloaded it and will play for a while to see if it can satisfy the needs of my friend. However, Peter's suggestion to use the Group Policy Editor might do the same thing with less overhead, but I am waiting for him to post back...