Hello; it's me again.

Quick question: I need to block any Java patches or upgrades from reaching a handful of machines. Could someone toss me a clue as to how to go about this?

Thanks.