How do I make a computer guests can use but limit it's functions?

I am setting up a computer that occationally a guest may want to use to poke around the net or so. I would like to have his access extreamly limited - no changing files - no deactivating antivirus, no downloading porn and no access to sections of the HD. If possible I would like to limit internet time since I have a limited time using dialup before I get charged for connection time.

I am using win xp pro, have formatted ntfs. I have found how to set up a guest account and to password protect the admin privlages accounts but how do I limit it further?

      • It seems like somebody just asked about this recently here, but I can’t find it now.
  • Anyway, Deepfreeze is one such application for preventing users from changing anything on a PC… In the thread I looked for, somebody else mentioned another similar program also…?
    ~