Windows 7: How to limit internet access using Win Firewall?

I am trying to setup a kiosk pc. Is there any tutorial around explaining how to configure the Windows Firewall so that it has the following profiles:

Firewall profile "normal":
- default configuration

Firewall profile "kiosk":
- software1.exe may access the internet using ports 1234 and 2345
- software2.exe may do outgoing connections only using port 3456
- software3.exe may do incoming connections only using port 4567
- all other programs may not access the internet at all; all other connections are blocked

Further, wwitching the profile (or changing the firwall configuration in general) should only be possible using admin rights.

How to do this?

Hi,

Can you see if this help:

Windows Firewall - Add or Remove an Exception

Regards,
Golden

Thanks. I know how to add an exception, but that doesn't help me much. I can add rules to allow software1.exe, software2.exe, and software3.exe, but that would still...

1. Let all other "default" programs through the firewall (on a fresh Windows 7 installation, it seems that by default many programs already got access, and that new software eg. when you download a new browser will always get access by default)
2. Not give me different profiles like "normal" and "kiosk" to easily switch between
3. Not handle the ports

Are you just after blocking specific websites?.

If so, You can do it in the Host files.

http://www.youtube.com/watch?v=x9gB1hK0h7Q

Well I am no self proclaimed expert on Windows firewall but I don't mind reading technical documentation.
You seem to have a fair grasp on things and maybe these references will help you get started on your solution. If not let me know and I will dig more.

Windows Firewall Tools and Settings
Managing Windows Firewall Profiles: Windows Firewall (WF)