restricting internet access

I would like to deny internet usage to selected users in an NT 4 domain by using group policies.

The default user and default computer policies do not have an option for this.

There is no proxy or ISA server being used.

How do I enable thispolicy