The simplest is to use your DHCP server and statically assign IP addresses to the machines that are allowed full access, then in those DHCP entries you can specify a different DNS server from the default on the network.
How you do this will depend on what DHCP server you use but most allow you to do static assignments based on the MAC address of the network interface of the client machine.