Isolate…

I have 15 users on a Dell swa and a router. With config all users have access to the net. I also have them sharing a wn2k server for applications. How can I isolate some of the users from not accessing the network and allowing others to access the net? Without adding another router?