Without the use of a radius server for something like MAC based access control, you could change the SSID to place users into a guest or black holed vlan, or assign firewall rules that prevent network access. You could then manually apply a group policy to the Sonos speakers that overrides the firewall rules or places them into the correct vlan.
... View more
