What is the easiest way to close access to the Internet on a computer?

Question

Windows

There was a problem: at the enterprise on the physical computer it is necessary to close access to the Internet. Completely, in general, completely close, but at the same time leave access to the local network: file storage, AD, network printers, ...
And the Internet user still needs: mail, sites, ...
How can this be optimally organized? A virtual machine on a computer, a terminal server, or put another "office" computer and switch the monitor back and forth, or something else?
And such "computers without the Internet" need to organize about 10.

Answer 1

Proxy with a white list or a ban on the use of signature