for example at the supporters clubs

Add OU for

• Management
  
• SUPP
  
• SUPP RESTRICED
  
  • Restrict users to no internet access
    
    • Under Properties->Group Policy Add Group Policy Link SuppRestricted
      
      • User Configuration->Administrative Templates->System
        
        • Enabled Don't run specified Windows applications, add firefox.exe
          
      • User Configuration->Administrative Templates->Windows Components->Internet Explorer
        
        • Enabled Disable changing proxy settings
          
        • Enabled Disable changing Automatic Configuration settings
          
      • User Configuration->Windows Settings->Internet Explorer Maintenance->Connection
        
        • Right Click on Conection->Properties
          
        • Basicly set a bad url for the proxy enable proxy settings http:10.10.1.10 port:80 use same for all, do not use for local address
          
        • see hotohomenetworking.com
          
• LIFE