At the New Mexico Military Institute (NMMI), both a four-year high school and a two-year junior college, students spend weekday evenings at their desks in mandatory study hall. The goal of NMMI for its campus network is to have a network tap on the desk of each cadet (as well as faculty and administrative staff). The Internet, now already implemented, is an open structure with little or no control placed on access, and this posed a problem at the Institute because of the wide variety of ages of cadets attending the school. This paper describes the types of accessible services, modes of access, and the challenge of programming a security front end which selectively restricts Internet use based on time of the day, day of the week, student class rank, grade point average (GPA), deportment, and other factors. The security system also makes it possible to restrict certain Internet privileges (Telnet and e-mail) on an individual basis. An Internet database (in POISE DMS format) holds all relevant data. Selected individuals may update the database on demand to change access restrictions. (Author/SWC)