How to stop a group of users to login to active directory domain

[TechPK]

I have Windows 2003 Active Directory domain. Some time I want to restrict/stop a group of users from logging in to active directory and then later I want to allow them to login. Is there anyway that I could achieve this target?

[nitesh mehta]

First try to check the connections from the client computers to the DC. Make sure you DNS is replicating across the domain.

Second You can force the Group policy to replicate I think every five minutes in a GPO. So the users will never have a chance to mess with anything.

[TechPK]

Hi Nitesh,

I think you didn't understand the question which I have. My active directory and DNS is working perfectly fine. I want that a group of active directory users should not be able to login to active directory domain at some time and then later will allow this group to login to domain. Is there any group policy or way to achieve this?