Depending on the size of your network you could also stop DHCP services on your SME server and assign static IPs to your workstations ... some get the gateway/DNS info assigned, those that don't ... no Internet. Email would still work, though, if you're using the SME server or another machine on the LAN as a mailserver.