Are they connected through a proxy server or a firewall to the internet? If they are you should be able to disable port 80 or set up a rule that would only allow certain IP's out. With a proxy server it's really easy. If your ISP has assigned the IP addresses I am sure they can cut off their access. If all else fails try the content advisor built into IE.