Try adding the firewall client to the ws.....

What OS are the workstations?

put the proxy (w2k server) address in IE>Connection> LAN settings>Use proxy 192.168.0.1
port 8080,
and tick bypass for internal addresses.

MLF