Windows XP and Vista both have parental controls built in (they did away with it on windows 7, grr...).
I would suggest creating a password for your user account and creating a brand new one for them. You can create another user and set limits on what sites they can go to and how long they can even be online.
Go to control panel and select user accounts. You can add a user, modify a user and set parental controls from there.