We use two programs WinKiosk and BrowseGate.
WinKiosk locks down the computer so patrons can't enter url's or the run
command. BrowseGate is an proxy server software program running on an regular PC
and keeps patrons from linking out of sites unless we want them to go
there.