Setting up a WAN

To do any access limiting on 9x workstations without spending any money sounds like a job for poledit.

http://www.microsoft.com/technet/treeview/default.asp?url=/TechNet/prodtechnol/winntas/maintain/profiles.asp

(remove spaces from url if cutting&pasting)

I see your are in trouble. But you have some solutions that are installing a proxy/firewalling structure. This is a software device that you can control so that the users can't access the internet directly. If you are using a win2K server you can install the microsoft internet access server, that can perform as a proxy firewall. Or you can install free software such as squid stable products (www.squid-cache.org), running in a linuxbox (red hat, suse are best) at www.linux.org, and the smb-auth program to control access via the SMB server for windows NT. Or installing a firewall proxy server of checkpoint software.
To gain access the user must be allowed by the proxy server, so you have to configure first the proxy device, and the firewalling structure. At the client's side you can setup the conection subfolder at the properties of the browser. Configuring the access via proxy and it's internal address and allowed channel (sockets, i.e 80,25, etc). You can set up your proxy to ask for userID and password or you can use the user's account verifing structure (win2k access) to allow the users reach the internet.

For info just contact me .

good luck!

The internet browsing problem can be solved quickly by making a few routing changes in the routers, not leting the sites route through to the internet.

The software limits can be imposed with Poledit.

Both solutions are free!