Restrict user on terminal to access over internet

We are using server 2003, there we have some user who have access over terminal, when they use client pc there we allow Internet and on Terminal we dont want to give permission to access the Internet, we want to implement Group-Policy there to restrict them, anyone idea about this??