internet connection

i have a windows 2000 adv srever in that i have two lan cards one connected to internet using direct connection with global ip , and second lan card to the internal lan connection.every one is getting internet conn using default gateway ip of secondlan card of the server. i want to restrict specific users to access the net , by what way or by using which software i can restrict them using net ???