Like the subject says, for certain PCs I want to restrict Internet access to
all sites but a couple, so they can still do Windows updates and AV updates.
So far I have not been able to find any solutions but I was thinking it
should not be all that hard. I was hoping for a solution which exists on
server PC so I do not have to install this software on all clients I wish to
control. I would then change the DHCP records for these clients to point to
a different gateway (the server PC running this gateway) and this gateway
would only allow Internet access to specified sites.

Does this make any sense? Any better ideas? If necessary I could build a
linux box for this purpose but a Windows software solution which I would
install on the server is preferred.

Please reply to this post, e-mail not valid. TIA.