Do you want to limit it to creating new parts or want total system denial?
For migration, I would place the whole system offline to any access. This can be done by changing the IP address or blocking the access to the system at your routers.
Thank you,
Ben H. Loosli
USEC, INC.