A registry element can be created to change the update policy for Java.
The element configuration should be as follows:
Action: Write value
Hive: HKEY_LOCAL_MACHINE
Key: SOFTWARE\WOW6432Node\JavaSoft\Java Update\Policy
Type: REG_DWORD
Value: EnableJavaUpdate
Data / expression: 0
The validation logic must be used to assign this key to specific computers.
To re-enable the policy the Data / expression must be changed to 1.