We are setting up sharepoint to be used by various groups (school districts) outside our domain. The user accounts are to be setup and controlled through active directory. What is the best way to limit these "outside" users from any access to our network (other servers, network browsing) except for the sharepoint site. I have looked at group policies and user rights but have not been able to formulate a conprehensive plan to keep them out of everything except sharepoint. Any suggestions would be appreciated.