Hi Matt, you may consider to look in to WAP321, it supports the Captive Portal.
If the resources are available, may be able to use url redirect to hit an internal webserver and filter requests there. This would be interesting to see. The url redirect wouldn't garauntee no internet access unless you have something that can manage your outbound connections such as a proxy.
-Tom
Please rate helpful posts
-Tom
Please mark answered for helpful posts
http://blogs.cisco.com/smallbusiness/