deny Internet access to selected individ

Want to deny Internet access to selected individuals in NT4, SP3 environment. I know that I can do that trick with Proxy Server (in use) but I have to require everyone to logon to the Proxy with a password. I’d really like a method that would be transparent to all users except the ones denied access.