No outside route

[Steve Rakoz]

When you do that (which I tried first) they still have
web access through Outlook by activating the WEB Toolbar.
(Outlook is needed for our getting to our exchange
server.)

 

[Richie]

If they need access to an external mailserver then your
options are restricted.You could just close off port 80 on
the particular machine. I presume you are using windows
for DHCP service??? If not some others offer restrictions
to web. Or you could always use net nanny