I'm trying come up with a way to disable internet access on a group of computers (this is a 2003 Active Directory enviornment, with a SnapGear hardware firewall). My first thought was to push out a ...