Restrict user to a website

I have a department that needs to access a website to enter order status. I only want them to have access to this site. We are on a NT 4.0 domain controller. Is there any software or group polices that I can apply.