Stopping Win98 users with NT server

I’m looking to stop my users from accessing the Internet through our DSL Line. They are running Win98 and installing AOL disks overwriting my portal setup for our DSL line, and therefore allowing them to get online. How can I stop them, without removing their CD ROM drives? Is there a WinNT 4.0 solution?