I have added the .adm template from the below MS article to a new GPO on my computers OU on the "Computer Cofiguration->Admin Templates". Then I went to the setting the "Windows Update->Do not allow SP@...". How do I confirm it is getting out to my computers.
Info from:
Temporarily Disabling Delivery of Windows XP Service Pack 2 Through Windows Update and Automatic Updates
Info from:
Temporarily Disabling Delivery of Windows XP Service Pack 2 Through Windows Update and Automatic Updates