Windows Server 2003 w/AD Internet Access Control

[sweetac]

Hello, I am setting up a Windows Server 2003 Active Directory domain and my client wants user-level internet access control. I installed a second NIC in the box and set up R-RAS with RIP v2 to handle routing. Also, I have DNS configured. Currently, all users are able to access the Internet.

Can I create a group, say called "Internet Access" and be able to assign specific members to that group to access the Internet or is this really not possible with the current setup?

Thanks!