We have a number of servers/workstations that we would like excluded from SCCM. Now I know there is a reg hack to prevent the client from installing but is there a way I can keep them from being discovered altogether? Obviously, I could create collections but I would like to have my All Systems collection clean if possible. If the only way to do this is by excluding specific OU's from System discovery could somebody direct me to the documentation to set that up? I haven't been able to find anything on that. It would be ideal to have a reg hack to prevent discover or something I can set in the database to prevent its inclusion.

I would say the best way is to only add the OU's to the discovery ldap path when you configure the AD system disocvery. You could also remove the Read permissions from the objects for the Site Server in AD, but that's not a path I would take.Kent Agerlund | My blogs: http://blog.coretech.dk/author/kea/ and http://scug.dk/ | Twitter @Agerlund | Linkedin: /kentagerlund