SBG900 bypassing network access 0

Ok all,
I just found out several SBG900's on our network are able to still get online after I have sent them a no access configuration. This works on all of our 4100,5100,901,941 motorola units.

What gives? Here is the config I am sending now, limited them to 16k. You can't change maxcpe to 0. What if I put in a mac address reservation of 00:00 etc..

Main
{
NetworkAccess 0;
MaxCPE 1;
ClassOfService
{
ClassID 1;
MaxRateDown 16000;
MaxRateUp 16000;
}
}