Disable internet for Domain Users Via DNS

i am having a win2k server with AD.i need to disable internet to all users in AD.the problem is when i give DNS setting of the server’s IP the system connects to internet.i want to disable internet.right now i dint configure the DNS to users.and so the login was also slow because of no DNS configured for users.
plz help.