Anyone know a simple way to prevent access to network on per user basis?

Is it possible to modify the DACL, for example, on
the TDI device and only allow specific users access
to the network?

Thanks,

Joseph