I have a LAN of 50 winXPsp2 workstations, in a win2k3sp2 domain. I have single DSL connection for internet. I am using NAT for simple sharing of Internet. I want to restrict(content filtering)/block(user or ip based) usage of internet for any/some workstations at any given time. If win2k3 does not provide such facility then, which "simple" software solutions you would recommend to me? I can use ISA06 if you can provide me with some access rules to be made.