"Deny" an update

I have a group setup that all my desktop workstations are a member of in
WSUS 3. I have certain updates that I approve for all workstations and
approve for the "all workstations" group.

Recently a person advised me that he has a workstation that is having a
problem with one specific update KB945432 on one specific machine. When
he uninstalls the update his problem goes away. Automatic updates
reinstalls the update on the proper schedule and then his problem comes
back.

My question is....is there anyway of setting up someting to "deny" an
update to a group or specific machine that will over-ride the approval
in the "all workstations" group.

Forwarded to WSUS newsgroup
(microsoft.public.windows.server.update_services) via crosspost as a
convenience to OP.

On the web:
http://www.microsoft.com/communities...pdate_services

In your newsreader:
news://msnews.microsoft.com/microsof...pdate_services

--
~PA Bear

Tom Svehla wrote:
> I have a group setup that all my desktop workstations are a member of in
> WSUS 3. I have certain updates that I approve for all workstations and
> approve for the "all workstations" group.
>
> Recently a person advised me that he has a workstation that is having a
> problem with one specific update KB945432 on one specific machine. When
> he uninstalls the update his problem goes away. Automatic updates
> reinstalls the update on the proper schedule and then his problem comes
> back.
>
> My question is....is there anyway of setting up someting to "deny" an
> update to a group or specific machine that will over-ride the approval
> in the "all workstations" group.

"PA Bear [MS MVP]" <> wrote in message
news:...

> Tom Svehla wrote:

>> I have a group setup that all my desktop workstations are a member of in
>> WSUS 3. I have certain updates that I approve for all workstations and
>> approve for the "all workstations" group.
>>
>> Recently a person advised me that he has a workstation that is having a
>> problem with one specific update KB945432 on one specific machine. When
>> he uninstalls the update his problem goes away. Automatic updates
>> reinstalls the update on the proper schedule and then his problem comes
>> back.
>>
>> My question is....is there anyway of setting up someting to "deny" an
>> update to a group or specific machine that will over-ride the approval
>> in the "all workstations" group.

On the workstation, from an account with administrative privileges, run the
WUA in interactive mode, select "Custom", and choose to IGNORE the
misbehaving update.

There is no way to do this from the WSUS Console, short of setting up a
custom group for that one PC.

Obviously you'll also want to isolate and remediate the issue preventing the
use of this critical Outlook Security Update.

--
Lawrence Garvin, M.S., MCITP, MCBMSP, MCTS(x4), MCP
Senior Data Architect, APQC, Houston, Texas
Microsoft MVP - Software Distribution (2005-2008)

MS WSUS Website: http://www.microsoft.com/wsus
My Websites: http://www.onsitechsolutions.com;
http://wsusinfo.onsitechsolutions.com
My MVP Profile: http://mvp.support.microsoft.com/pro...awrence.Garvin