block surfing

I have an already designed network with NT 4.0 server, ethernet LAN, win2000, win98. Some PCs have static ips and some have DHCP enabled. I want to block the users from using the internet in all the pcs. Any suggestions? Thanks in advance.