locked
removing an update only for a set of PCs - Avoiding installing an update only for a subset of the PCs RRS feed

  • Question

  • Recently, we discovered a problem in a internal/LOB app, wich stops working after the install of the kb/312658 update

    NO problem, uninstalling the KB, the problem was solved, the app is now working again

    But.. the WSUS will deploy the update again, am I right?

    How to avoid this, only for a specific set of PCs? How can i avoid future re-installs of the update only for a subset of the corp PCs?

    Now, i´m using GP based identification, where test-machines, PCs, notebooks and servers belongs to groups and the config is deployed via group policy.

    What i have to do? create a new group for the machines that need to not have the update AND Decline this particular update to these new group?

    Monday, February 22, 2016 7:38 PM

Answers

All replies

  • remove the approval, this will stop any further deployments.

    you can also consider to approve-for-uninstall (if the particular update supports that)

    review your computer groups in WSUS. you can create a group (name the group something meaningful, like: LoBapplicationNamePCs

    create another group (named AllExcludingLoBapplicationNamePCs)

    add the relevant computers to that new group

    when reviewing/approving updates, create approvals accordingly for the relevant groups

    If you Decline the update, decline applies globally, not to a specific group.

    https://technet.microsoft.com/en-us/library/jj219427.aspx

    https://technet.microsoft.com/en-us/library/cc708474(v=ws.10).aspx

    https://technet.microsoft.com/en-us/library/cc708530(v=ws.10).aspx


    Don [doesn't work for MSFT, and they're probably glad about that ;]


    Monday, February 22, 2016 8:05 PM
  • Hi KayZerSoze,

    If you want none of the clients in the group could install the update, you may "approve for removal" the update then decline the update, or "not approve" the update and uninstall the update on client.

    If you only want specific clients not install the update, you may create another group for them and not approve the update.

    Best Regards,

    Anne


    Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Support, contact tnmff@microsoft.com.

    Tuesday, February 23, 2016 1:44 AM