Any good free proxy server should work for you. You would install it from administrator account so that those users don't fiddle around with the settings. Usually they give an option to use the block list or allowed list.