Exclude specific subnet from discovery

[Kevin79]

Is there a way to block a specific subnet (or I could do OU) from discovery in SCCM? My VDI administrators don't want the VDI machines to have SCCM automatically install the client, Endpoint Protection, Windows Updates, etc and want them excluded.

[deploymentmonkey]

Just a rapid answer: there's a way to exclude, you can use collections or OUs if i remember.. So VDIs are in a seperate OU ?

[Kevin79]

Yes. They are in a separate OU.

[Peter van der Woude]

Make sure that the OU is not part of your AD system discovery.

[Kevin79]

Is there a way to exclude an OU if the parent is selected? IE. I have an OU for US and under that is another OU of VDI. Can I exclude VDI while having everything else in US included?

[Peter van der Woude]

No you either exclude everything below an OU, or nothing...

[Kevin79]

That is what I was afraid of. I'm trying to avoid specifying each sub-OU in case they add one on the future. I'll have to work with them and tell them that they need to manually add any new OU to SCCM.

[GarthMJ]

Why don't you just turn off automatic pushing for the CM12 client? Use a start up script instead.