networking

hi you all out there, i am looking for a solution for network security in my small home/ office network.i have two workgroups in my lan and one internet account.i am looking for a means to deny internet access to one workgroup.so that only one workgroup should have access to the internet.how do i go with this? all the pcs are running windows xp pro.
thanks