I manage a small office network for my father's practice and lately there's been some problems with employees installing and uninstalling programs without permission and spending too much time on Facebook while at work. All of the computers in the office run Win XP since his practice software isn't supported for Vista/7/8. I'm looking for a simple guide to set up employee user accounts and restrict their application access to the main practice software and block Facebook, Twitter, Instagram, etc. from the entire network. Thanks in advance for any help.