Disable Network Access for Specific User

On a Win2k Pro machine, is it possible to disable network access for a particular user, while allowing network access for other users?

I would like to consider setting up a less secure (shared) local account on some Win2k Pro machines, but only grant local access with this account–no network.

Is this possible? If so, how?