dear experts

is there any way i can prohibit internet access on some computers in the environment using computer names with GPO - as computer settings.

and is it applicable to do it using GPO only without referring to TMG? and if done what are the disadvantages of doing that?

thank you all