In OCS 2007 R2 it is fairly easy to block certain clients from connecting to OCS, just like in OCS 2007 R1. But the nice thing included in R2 is that you can configure your OCS environment to automatically update clients that connect using a wrong version...