System File Protection

I have a few customers that have had problems with their kids accessing "bad" web sites. I have a web proxy service that I use, but some of the kids know enough to turn off the proxy to get to the sites they want to see.

Normally, my business has a quick script that we can give the customer that will rename (or delete) the inetcpl.cpl file so that if you try to open the configuration for IE, you are denied access. Problem is that the System File Protection kicks in and fixes the file that I don't want fixed.

I need to be able to either rename or remove the inetcpl.cpl file on a PC running Windows ME without totally disabling the System File Protection. Totally stopping SFP is NOT an option. Using policies is too complicated for my customers and not something I can consider... this has to be as simple as possible. If there is a *freeware* tool that will lock out the Internet Control Panel, that is an acceptable option... as long as it is FREE. I want to keep the cost to a bare minimum for my customers. I've heard that there is a way to add files to SFP, so I assume there is a way to remove them as well. So far, I haven't been able to find out how to do this.

Why not use a couple of registry tweaks such as these

ONE

TWO

THREE

For the list of files protected have a look at the files C:\Windows\System\Restore\Filelist.xml and C:\\Windows\System\SFP\Sfpdb.sfp. To add remove files that are protected you can edit these files. Wordpad can be used (just make sure it does not get premanently associated with opening files of these types). One or both of these is "protected" though so to replace them you will need to:
1) Make copies
2) Open the copied file with Wordpad and make your changes
3) Boot to a dos prompt (not dos box) and copy your changed files to the appropriate folders (after making backups of the originals first)