You need to ensure that Server1 downloads express installation files from the Microsoft Update servers
You need to prevent all of the GPOs at the site level and at the domain level from being applied to users and computers in an organizational unit (OU) named OU1