Block IE 11 from existing deployment

Hi guys,

I have already deployed an update package including IE 11 updates to a large collection of Workstations. We have a particular client who can't have IE 11 installed.

I saw this article - https://community.spiceworks.com/how_to/57045-block-ie-11-via-gpo

(i just noticed on article above, policy states - This policy setting does not prevent installation of Internet Explorer 11 through other mechanisms such as SMS, SUS, product disk and so on.)

Not sure it would apply to SCCM though.

Is there anyway now to deny this update from going through?

EDIT: Would this work - http://blog.danovich.com.au/2012/12/18/decline-exclude-an-update-in-sccm-2012/

Thanks - Travis