Controlling users acces to the internet

I have small network currently of 22 users and growing. Recently management asked me do have control over internet access to prevent users from abusing it. I have a server network for users to share databases, access using DSL access via a DELL swa. If I wanted to deny access for one user how do I? Do I have to configure my W2K SERVER to AD to control? Any help would be greatful.