Are the computer part of any Domain network? Can write a script place it in the domain server, do a reboot and all the work stations would log into the domain and the script would be run to prevent updates. Also, never ever except updates blindly they can scre... Login to read more.