hiding windows updates using the registry

I posted this question on Technet and so far I could not get an answer. I
tried to cut post down.

Hello,

Is there a way to hide updates using the registry? I know how to do it
through internet explorer and automatic updates, but that means each
computer
will have to be done individually and would take to many man hours. If we
were able to deploy a quick registry edit though our deployment software it
would be a time saver.

The reason we need this is because KB-912812 affected our clinical systems
and it needed to be removed, but of course Automatic updates will just
re-install it at a later time. So we had to disable Automatic updates and
un-install KB-912812 for the time being with two quick registry edits and
that is not a viable solution.

Also we have not implemented a WSUS server as of yet and
I am not sure when it will be implemented. The problem is the support group
needs to deal with it in a different way then it is now, which is shutting
off Automatic Updates because there are far to many computers to manually
hide the KB-912812 patch. Plus we do not want to be vulnerable to future
attacks because Windows is not patching itself. Until that is implemented we
are trying to find an alterative solution because that dream could be a
while.

Any help would be appreciated.

-Thanks

> The reason we need this is because KB-912812 affected our clinical systems
> and it needed to be removed,

Perhaps installing the (temporary) ActiveX Compatibility Patch would be a
suitable workaround until you get your systems updated:
http://support.microsoft.com/kb/917425
--
~Robear Dyer (PA Bear)
MS MVP-Windows (IE/OE, Shell/User, Security), Aumha.org VSOP, DTS-L.org

Domenic Palazzolo wrote:
> I posted this question on Technet and so far I could not get an answer. I
> tried to cut post down.
>
> Hello,
>
> Is there a way to hide updates using the registry? I know how to do it
> through internet explorer and automatic updates, but that means each
> computer
> will have to be done individually and would take to many man hours. If we
> were able to deploy a quick registry edit though our deployment software
> it would be a time saver.
>
> The reason we need this is because KB-912812 affected our clinical systems
> and it needed to be removed, but of course Automatic updates will just
> re-install it at a later time. So we had to disable Automatic updates and
> un-install KB-912812 for the time being with two quick registry edits and
> that is not a viable solution.
>
> Also we have not implemented a WSUS server as of yet and
> I am not sure when it will be implemented. The problem is the support
> group needs to deal with it in a different way then it is now, which is
> shutting off Automatic Updates because there are far to many computers to
> manually hide the KB-912812 patch. Plus we do not want to be vulnerable
> to future attacks because Windows is not patching itself. Until that is
> implemented we are trying to find an alterative solution because that
> dream could be a while.
>
> Any help would be appreciated.
>
> -Thanks

Thanks for the help, but the patch does not work.

Does anyone know how Windows catalogs all the updates locally? If I knew how
it does I maybe able to find a work around.

Thank you again


On 5/10/06 3:56 PM, in article , "PA
Bear" <> wrote:

>> The reason we need this is because KB-912812 affected our clinical systems
>> and it needed to be removed,
>
> Perhaps installing the (temporary) ActiveX Compatibility Patch would be a
> suitable workaround until you get your systems updated:
> http://support.microsoft.com/kb/917425