I have a site that is using SBS2003 (not running ISA). There are certain workstations that must be able to access network drives, but not the internet. I've tried changing proxy and DNS settings manually, but the (night shift) staff who use those computers change the settings back so that they can access the internet again. This is an ongoing problem that needs to be addressed permanently.
Is there a way to prevent those particular workstations (or users) from accessing the internet using group policy? I'm not too familiar with Group Policy management, so a little guidance would be appreciated.