I have a challenge where I want to disable all updates to clients when VPN connected over 3G. When the client connects user wireless or wired I want the SCCM updates to be available again. I cannot create a subnet or assign these users an ip range.
One idea is to create a firewall rule to prevent access to SCCM when a user is connected to the network over a 3G connection\adapter. The view is that we'd create a group policy within the OU and filter using WMI to apply firewall rule certain users and prevent access to SCCM by blocking connections from the SCCM client to the SCCM server whilst connected over 3G.