Are you trying to keep them from checking and sending email using the email address on your SME server, or are you trying to prevent these users from accessing any form of email whatsoever - yahoo mail, hotmail, gmail, aol, &c - from inside your network?