We would like to block proxy access to the Internet for a group of workstations and servers based on AD Group membership.  Is this possible?  If not, what is the best approach to blocking Internet access for specific Windows workstations and servers?...