Block via AD Computer Group

Hello,

I'm wondering if its possible to assign policies to an AD Computer Group. I've assigned policies to an AD Group that had users in it but never with computers. Can anyone tell me if this is possible?

If it isn't, how would I go about blocking a number of computers that have dynamic IP's and I'm unable to block by OU or user.

Thanks

-Alex