what kind of group policy to configure for blocking of internet access ?

You can use group policy to deny users from using Internet Explorer --- users will still able to access internet with a different explorer. A better way is to using gateway or firewall to block the ports 80 and 443 for users.Shaon Shan TechNet Subscriber Support in forum If you have any feedback on our support, please contact tngfb@microsoft.com