You may do this by using Windows Defender Firewall with Advanced Security (you may search for this) and create rules and policies to block all communications except the one you want to be active.
However, for the part which you mention about not be able to undo it, I am wondering why you are looking for this? Whatever setting you change, you are able to undo it. However, you may setup standard user and ask the other user to use it and they won't be able to change the Firewall without the administrator's password.