Securing Workstations from the Internet

We have a Win 2000 Server with around 20 computers in it’s domain. We are setting up a T1 connection for internet access which the server and several workstations must have access. We have 6 POS (Point of Sale)workstations that do not need nor is it feasbly to have internet access on these workstations. How can I disable them?