can Group policies remove default gateway

I would like to know if you can use Group Policies (2003 server) to remove the default gateway on certian pc’s. I would like to block certain users from access the internet. Also what are minimum permission you need locally on 200 or XP to use the route command. (eg poweruser)