VPC Windows 95/internet connection question

[KrisAtTiac]

The situation:

I have a number of legacy computers (they lack both USB & CDW capability) that are currently running OS=Windows 95 as instrument controllers. Due to the nature of the software all logged on users must be members of the Administrators group so all backups are entered on the network via sneaker net. The system of hardware/software/instrument/associated processes has been verified ("validated").

The questions:

How can I set up a computer running Windows XP Pro with a Virtual Windows 95 to run the legacy software and instrument such that the data from the Virtual Windows 95 can be sent to the standard Windows XP Pro, and such that the virtual computer has no access to the internet? I wish to be able to attach the computers running XP to the domain and get the data from the virtual PC to network without exposing the virtual PC to possible contamination from the internet.

How can I document all of the above?

Many thanks!