If they're in a Windows security group, you can add the group as a login and deny permission to connect to the SQL Server.

However, this is usually seen as a method of last resort. Someone could always be added to the group that you didn't intend to block.