For security reasons, normal operators are restricted from using the internet on work computers. However, there are many situations where the manager or systems administrator require internet access. Currently, this is accomplished on a per-computer basis by a hardware firewall, and users are just not permitted to use 'internet' computers without authorization.
In Windows XP, is there any way to allow or restrict internet access on a per-user basis, such that an administrator can use the internet on a computer but a normal user logged into the same computer cannot? Please note that all operators will still need full access to the local network.
Edit: Just to clarify, by 'internet' I refer to all internet access, not just web browsing.