Restrict Internet Access by User

Im an IT admin at my organization and i was wondering how i would go about restricting internet access from a certain user on our domain.

I have one account that i do not want to be able to access the internet.