secure guest account

I have XP Pro not attached to a domain.
I have a regualr user account that has admin rights.

I want to be able to setup teh guest account NOT to be able to install
programs, or download anythign from teh Internet. or at least not install
anythign from teh Internet.

how can I do that?