Force iTunes to follow parent control settings

We're considering installing iTunes on our students' laptops. Currently, iTunes basically ignores any parental controls we assign it.

I log in to Windows using my (admin) domain account. I install iTunes. I assign my parental controls. I click the lock.

I log in to Windows using my domain test user-level account. I run iTunes. Despite it already being installed, a Windows installer dialog box pops up. Poof! No parental controls.

How do I get iTunes to actually follow the parental controls I assign it.

If that's not possible, what addresses can I redirect in the hosts file to interfere with iTunes' ability to connect to the store and radio.

We're required to filter inappropriate content and radio would consume too much bandwidth.