Win 2k Server

There is a problem user that I want to only have access to our company website. How can I set this up, using the active directory, or any other method one can think of? The user has WINNT4 and the server is Win2k. Thanks!