Hi Yanhke,
Thanks for posting here.
You may consider achieving the goal by defining network policy and setting IP filter rule for each group :
Network Policy Settings Properties
http://technet.microsoft.com/en-us/library/cc772474(WS.10).aspx
Thanks.
Tiger Li
Please remember to click “Mark as Answer” on the post that helps you, and to click “Unmark as Answer” if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.