If you would like to restrict PC:s from connecting to certain IP addresses,
I suppose you could create a IP filter that you apply through group policy.
From a design point of view, I strongly suggest that you use a firewall like
ISA server to segment your systems and do your filtering between segments in
this device instead.
Regards
Niclas Lindblom