Blocking internet access w/ IE 6 & Win2003server

Here is the scenario. I have a small biz customer w/ main site running
win2003server AD, DNS, & other apps. They have 3 remote sites connected to
main via vpn. Now they want to block internet use for SOME of the users,
not
all. I dont want to proxy back to server because they use DSL.

Is there a way i can use a GPO to either block IE from reaching non local
domain sites, or just block IE from executing all together? Again, i only
need this to apply for certain users, not all the domain users.

Thanks,
Brian


.