Excluding .Net Framework 4.6.1 when building a reference image

I have written some posts before on how to block updates if you build your images using MDT or SCCM for that matter and download the update using ZTIwindowsupdate.wsf directly from Internet instead of installing a dedicated WSUS which I always recommend, http://ccmexec.com/2013/09/tips-when-building-images-with-configmgr-2012-part-2/ I got a couple of questions on how to block .Net Framework 4.6.1

Deploying a custom iOS Wi-Fi profile with password using Intune+ConfigMgr

One very common request when implementing Intune is to distribute a Wi-Fi profile with WPA2 and a preshared password. This is currently not possible either with Intune standalone or with Intune integrated with Configuration Manager 2012 using the UI. I have already written a post on how to create a custom iSO profile using Apple