HI

we deploy popup private networks at large outdoor venues. one of the issues we are having is users automatically downloading windows update across the network and saturating the WAN line (typically 20MB). Does anyone know of an easy way to block windows updates altogether or reduce the impact to the WAN without restricting the LAN?

Historically we ran a blanket firewall with a dedicated white-list but we now require access to Google Re-Captcha which means opening up the internet to a wider group.

any help is much appriciated.