Block Internet Access on a Single Workstation

I have one guy in the Warehouse that just spends too much time on the internet. How do I stop him from accessing the internet on just that one station. My firewall wont restrict just him. Is there a way on his computer to stop him? He has Windows XP