direct access force tunneling for some clients

I want to set up some clients using Direct Access 2012 to use forced tunneling, but I do not want to change the Direct Access configuration which would set it up for all clients. Could I make a copy of the Direct Access Clients settings GPO and modify it for a group of computers? What settings would I change? All the clients are using HTTPS tunneling to access the Direct Access server, which is running with two adapters behind an edge device.