Down and dirty fix for this that I used is to assign static IP addresses to each computer on the network.
Then you can block individual IP's or groups of IP's in the rules on the router.
Or, if you need dynamic IP's for some reason - then you can deny it to all, and create a rule that allows you to use it.
For example, here's what my IP's are
192.168.0.1 - Main Router
192.168.0.2 - my PC
192.168.0.3 - my FTPServer
192.168.0.4 - wife's PC
192.168.0.8 - oldest boy's PC
192.168.0.9 - youngest boy's PC
192.168.0.50 - wireless laptop
192.168.0.99 - wireless router used as access point
So (for example), what I do to block the boys AOL IM is to create a rule blocking TCP port 5190 for IP 192.168.0.8 with the selection to "Block Always" and another rule to block TCP port 5190 for IP 192.168.0.9 with the selection to "Block Always". Then I enable it and they have no AOL IM access. If it's not enabled - then they have access.
Conversely, I could allow everyone to have dynamic IP addresses - and I could assign myself and the wife static IP's. Then I'd block all AOL IM traffic - and create a rule that allows the static IP's to access those ports.
So, all you've gotta do is to decide how to assign IP's on the LAN and we can work from there.
>> Stay informed about: help > my lan with ICS and firewall