A simple GP task - Preventing certain users from accessing the network

view story

http://serverfault.com – I've been given with the following task to sort out in GP: Create a group under the name Support. Make sure any users under Support group cannot access specific IP addresses of my choice (including mapped drives and general network discovery tools). After some struggling with the GP manager in the 2008 Server, I gave up. Anyone can guide me through the procedure? ()