how to restrict internet

we use proxy server for our internet connections. i have some workstations who are not authorized to use the internet using the internet, even though they know nothing about our proxy settings. they receive links in their email and it will put them on the internet. how can i limit users to no internet. our file server is win nt, workstations are win 95, 98, 2000. any suggestions?
thanks
steve