I wonder, whether is a possibility to add an user without internet access? I've experimented with user addition, and although I've taken him out of groups for internet usage, I could painlessly access the internet as that user with my wireless access.