bottom line is I want to prevent them from updating the 10.9.5 boxes to 10.10.anything. I'd rather not turn off the App Store or software updates in general, but I need to prevent that particular update from getting run, by a user that is an admin. Either stop them from seeing it, stop it from being offered, or throw a spanner in the system somewhere to prevent that specific update from being able to run.
