I have a policy which applies proxy settings to all workstations.....

What I would like to do is stop internet access to 1 group of
workstations at random times throughout the day.

What is my easiest way to do this????? (without getting a user to pull
cables out of a switch) can another policy be put in place to overwrite
the first policy at certain times or at random times when needed?

Thanks in advance