Guys Got Wsus going and everything.

Now I have put a policy on on the OU where all our users sit in AD with the WSUS details.

My boss however wants his own control.

Can I disable WSUS for his machine alone without putting him in another OU with a different policy?

I edited GP on his machine locally , dont know if that will override domain settings. Can someone help out here.

Thanks