Prevent Obsolete clients from connecting

Is there a way to apply a policy to prevent obsolete clients from remote controlling computers based on the useragent string in the browser they are using?

Basicly, Windows 7 is coming to End of life, we want to block anyone that is still using a windows 7 system as a client to connect to a host come Jan 20 2020.

I know the useragent string can be modified etc, but the vast majority will not know how to do this.