deny access to internet

Is there a way to deny access to the internet by computer/ip address. I want to be able to stop internet usage at a specific workstation even though the user has internet priveleges. We are using proxy 2.0