Sorry not really an answer to your question but I saw this and thought I would mention how we control what gets what... We use the targeting groups in group policy to control what gets what, we have the groups Workstations, Servers, Domain Controller, and some specific App_JavaInstall ones for example.
When we approve Java it gets approved to only the Workstations targeting groups etc, we find this the best way to grannually manage what gets what.
Hope it helps even if its not the answer you wanted.
When we approve Java it gets approved to only the Workstations targeting groups etc, we find this the best way to grannually manage what gets what.
Hope it helps even if its not the answer you wanted.