I'm running a rule that blocks students from "x" sites as a group. I was wondering if there is a way to add an exception, so students can check email etc from selected machines in the library, or by computer. i.e. If a student logs into a library computer, they may infact avoid the ISA rule all together.

Any suggestions on how I can do this while leaving the machine on the domain?

Thanks!