I don't think you can accomplish the permissions you would like as far as administrative rights go. For the time-limited internet access, you're going to have to use a third-party program. CYBERSitter is one such program that supports this feature. See http://www.cybersitter.com/advanced.htm