Restrict internet access to rdp users

Hi ,

We have a single OU having 100 users .we want to restrict internet on basis of userid bu using group policy . or any other way in whcih full internet access can be blocked to certain users in AD.