workgroup network security

i have a workgroup network connected with the 8 xp computer all are directly conneted through the switch. i want to restrict 2 computer for internet but allow the access for file and folder sharing. is it possible ?