How to disable updating on individual machines in a domain?

Question

Windows

Hello, it is necessary to disable the ability to update on individual machines connected to the domain.
The domain passes auto-update settings to everyone.
Is there a way LOCALLY on a specific machine with full local administrator rights to disable the update service for the moment it works in the domain?
The network structure is such that 5 machines are connected via interface #1 to the server, and the server is connected to the corporate network via interface #2. 5 machines receive only domain settings so that users can work under their own accounts.
Whether there is an opportunity on the intermediate server to block for one interface the reversal to update service?

Answer 1

Delete:
Windows\System32\GroupPolicyUsers
Windows\System32\GroupPolicy
Disable service:
net stop gpsvc
Become branch master: HKLM\SYSTEM\CurrentControlSet\services\gpsvc and remove all others from permissions.

Answer 2

Transfer the machines to another OU and set up a GPO for it, and then remove the update server there

Answer 3

the fact of the matter is that you need to desperately stay in this domain