[rhodysurf]

Our company has a dc but not that kind of control over child computers and it would be a large overhaul (and out of my control) to change the whole network setup.

I wish we used wsus though. M

[setq]

You can attach a GPO to the OU that the machines are in and turn it off for everyone.