Prevent software deployment to certain OU

[Kevin79]

I have an OU that I want to just deploy SCEP definitions to, no Windows Updates or other Software (like Office, Adobe, etc). What is the best way to do this?

[Peter van der Woude]

Create a collection based on that OU and use that collection as an exclude collection for your other collections.

[Kevin79]

Thanks. I was hoping there was a different way so I wouldn't have to add that collection to all of my existing collections and remember to do it for future ones.

[YPCC]

create a collection based on your OU and apply a non-recurring maintenance window to it which has expired, that way nothing in that collection (therefore nothing in that OU) will get any deployments