If you are the admin person you can log on those machines right click the properties for the exe of internet explore, click on the secrity tab and remove all the users except the administrator. When they click to launch internet explorer it will not run because they no longer have rights to run it. Also make sure they have no inherrited rights that to the exe either you'll find that in the advanced section. This will work with other programs you do not want them to run as well. If you have a firewall running it can be configured to block internet access by the IP address of the machine or you can setup a yes list and allow certain sites. Depending on the firewall you can have it block and unblock internet at certain times. Which is the way we do it. If your email goes to a mail server first this setup will not bother the email. Hope this helps you out a little.
I've been tasked to cut off internet access to certain employees (we run Win2K as network), and I was wondering what the easiest way to go about that was. In a perfect world, I would want to keep e-mail access, but shut down web access (though even a setup where web access is kept but restricted may be good as well).
We are running 2K Server, not Exchange. Our e-mail is not in-house.