Using SUS server and not approving the update is another neat little trick for this too.....