Restrict Internet Explorer

Hi!

There are Win2K domain with Active Directory, and I need to restrict some group of users from using Internet Explorer or accessing to Internet during working hours. Could you please tell me how?
Any detail comments or help will be appreciated so mcuh. Thanks.