You can attach a GPO to the OU that the machines are in and turn it off for everyone.