How Can I Control Internet Access for Specific Applications on Windows?

I'm looking to set up my Windows system so that only certain applications can access the internet, without making any changes to my router or using extra hardware. I'm not very experienced with this kind of setup, so I could really use some clear guidance.

Here are my main goals:
- I want to allow internet access ONLY to specific applications that I approve. For example, Roblox should always have internet access, even if its path changes, so I need a rule that doesn't rely on a fixed path.
- Additionally, I want to prevent any bypass attempts, like renaming executable files.
- I aim to block access to web browsers and any web content in general, including sites like Google, YouTube, and social media. This also includes blocking all Chromium-based browsers, even the portable versions.
- The only exception is Google Chrome, but it should only work if it's installed in the official path: `C:Program FilesGoogleChromeApplication`. Portable or relocated versions should be blocked.

I've tried running a custom script as a service to monitor and block unwanted processes, but I'm not sure it's the best approach. I'm hoping for advice on a more reliable method to restrict internet access at the system level, something that works for all user accounts and doesn't require router configuration. Any suggestions would be greatly appreciated!