I am very new to scripting and I have a problem that I think can be solved using this.
I have around 800 users who need to be completely blocked from internet usage but still should be able to be on the intranet and another 400 users who should be able to browse both internet and intranet.
Both kinds of users are mixed in different vlan's so I cannot distinguish using network addresses.
All these users are on DHCP. I can create a group on the server and put all the users to be blocked from the internet in that group and then run a script for the rest of the users to change their DNS server to thir local machine or a dummy IP on the network. Can someone help me with this?

Thanks,