Using ZoneDirector alone this cannot be achieved. You need 802.1x authentication + Dynamic VLAN. Based on the user credentials either they will fall on VLAN having internet or on VLAN having no internet.
Bobby is correct, but need more info on your requirement to check on its feasibility, if User B can be defined based on OS, MAC-Address then it can be achieved also this depends on your current AP/ZD model.