You should be able to do this by moving most users to be members of a new group and
then not letting that group onto the servers. Or create an exclusive group for the
servers in question. Does that not work?
The link above also has other related links.