Network Segmenting with DHCP Scopes

We would like to use DHCP to segregate internal users with rights to access our firewall from those internal users that dont.

The problem is that all of the users use the same hubs, trunks and routers. The firewall is not capable of using the NT user database

Does anyone know of a way to do this. Perhaps using a scope id?

Thanks