Help how to allow outlook only on machine without allow internet
If by internet you mean web access, then you can set up Outlook with IMAP instead of ActiveSync, MAPI over http or outlook anywhere (a.k.a. RPC over https) and block TCP 80/443.
I would strongly recommend secure IMAP over TCP 993. Otherwise the login details will be in clear text.
Bart...