Is there a way to ensure that patches are not deployed if the target computer connects via a 3G aircard please ?

 

I was about to deploy a number of patches to a machine, the user disconnected from the LAN and started up his wireless aircard (Sierre Wireless 360) and connected via a VPN. At this point the DC agent must have connected to the server and started the patch install.

 

The patches were huge (one of them was XP SP3), fortunately I spotted what was happening and dropped the VPN and aircard session; however in future this could be a problem as data over a 3G wireless is very slow and extremely expensive.