[Handle KESB from KSC to stop or block internet on Endpoint [MOVED]]

My organization is using endpoint security of business and we have different groups same as polices. We've one group in which we don't want to allow end user to access internet traffic. How can I use polices to block internet to end user? //Mod Note: moved to proper section