FVS336Gv2 Firewall config to block local LAN Internet Access.

I am having problems configuring  my FVS336Gv2 firewall. Currently all local network devices are able to connect with the Internet with no problem. Mostly personal computers accessing the Internet for web access, email, etc.

My goal is to block Internet access to some local network devices according to a Schedule based on their LAN Users group. The Outbound Policy looked like the easiest approach. I created an outbound policy that Block By Schedule and Allow otherwise for a specific LAN User (group). Activated and found that the device that should have been blocked was able to function normally. I know this would have only blocked one direction but that should have achieved my goal.

Eventually I tried to block ALL traffic by changing the Default Outbound Policy to Block Always and I created an Inbound Policy that was set to Any Service, Block All, Any WAN user. Again all local network devices connected to the Internet with NO connectivity issues.

In short the firewall was NOT preventing any devices from connecting to the internet. I feel that I must be overlooking something simple. It would appear that the firewall will NOT block ANY traffic originating from the LAN.

Any thought would be appreciated. As mentioned I am working with a FVS336Gv2, Version 4.3.1-18. all Vlan ports are set to Default and only one active WAN.