I have written some posts before on how to block updates if you build your images using MDT or SCCM for that matter and download the update using ZTIwindowsupdate.wsf directly from Internet instead of installing a dedicated WSUS which I always recommend, https://ccmexec.com/2013/09/tips-when-building-images-with-configmgr-2012-part-2/ I got a couple of questions on how to block .Net Framework 4.6.1…