allow certain web sites from workstation

we run a wireless router and a 15 port nortel hub
all work stations are given access to the server and are added to the dhcp address pool for internet access. my question is what are the steps that i need to take inorder to restrict workstations to only certain web sites. some of our employess are spending to much time on personal browser pages.