Disable third party app updates on sbs2011

I need you to develop a group policy that will disable the fallowing third party updating software via group policy on a sbs 2011 domain with both xp pro and win 7 pro clients. acrobat reader 9 or latter flash player java I will need detailed directions on how to set up and deploy the gpo and (scripts?) you create on the small business server. Success will lead to more work as I will need to push out updates via group policy, advanced WSUS configurations etc.