Reject user if does not match group's checks

Although I saw some similar questions on forum, I didn't see a clear response to it. *The question is: *Is there a way to force user be rejected if it does not match check conditions for the group that belongs to? Thanks.