I recently needed to prevent some client from connecting to a few SSIDs. I created a Computer GPO with the following configuration.