I am wondering if anyone has any experience with monitoring employee internet activities. I want to be able to limit access to certain website and monitor usage.

Am I legally allowed to ?
What software is best to use?
Are there features in win xp sp2 I can use?

Thanks for the help.