[Old Master Q]

Terminal Services for Microsoft or Citrix for the applications. you won't be able to block internet access unless you enable access lists on your firewall/router, that or use a proxy server. do you really need to go this route? i'd imagine at the end of it all you're going to have some pretty pissed off employees.