Microsoft Security Updates


  • I would like to block a particular MS security update, KB3008923. How do I do that using GPO? Or is there a betting way?

    Please help!!

    Thank you,


    Monday, December 15, 2014 6:33 PM


All replies

  • Are you using WSUS? If so, disable that deployment in your console.

    If my answer helped you, check out my blog: Deploy Happiness

    • Proposed as answer by DevOn99 Monday, December 15, 2014 7:27 PM
    • Marked as answer by jasonDMB Thursday, December 18, 2014 4:10 PM
    Monday, December 15, 2014 7:21 PM
  • Hello Joseph,

    Thank you for the quick reply. No I am not using WSUS here. I need to configure that. Do you know if WSUS is installed on server 2012 r2? Sorry, I am a novice when it comes to servers and unfortunately I am the only IT at this small company.   Or is there an easy way to block it via GPO?

    Jason Heaney

    Monday, December 15, 2014 7:34 PM
  • WSUS is a role of Server 2012 R2 (so yes it is supported):

    As far as I know, there is no way of doing that with GPO.

    Please take a moment to Vote as Helpful and/or Mark as Answer where applicable. Thanks.

    • Marked as answer by jasonDMB Thursday, December 18, 2014 4:11 PM
    Tuesday, December 16, 2014 12:17 PM
  • Hi,

    >>Or is there an easy way to block it via GPO?

    I agree with Idan that there is no group policy setting which can help us do this. Besides, regarding WSUS, the following link can be referred to for more information.

    Windows Server Update Services

    Best regards,

    Frank Shen

    Thursday, December 18, 2014 8:23 AM
  • Good Morning,

    I just wanted to thank you guys, Joseph, Idan, and Frank for your responses. I am going to install WSUS on our 2012r2 server here so I can manage security updates and have the capability to block any updates that impair any of our websites that we use for work.

    Thanks again all of your responses helped me out.

    Have a Merry Christmas,

    Jason Heaney

    Thursday, December 18, 2014 4:14 PM