Originally posted here by breakology
Do you have a router? You could block access to port 80 for the users you don't want on the web.
That should stop most browsing, and those that require it can have specific 'allow' rules for their machines.

But what about proxy servers?

Can they be stopped by blocking port 8080?

Or is this more complex than that?

Steve