"Deny" an update

Discussion in 'Windows Update' started by Tom Svehla, May 14, 2008.

  1. Tom Svehla

    Tom Svehla Guest

    I have a group setup that all my desktop workstations are a member of in
    WSUS 3. I have certain updates that I approve for all workstations and
    approve for the "all workstations" group.

    Recently a person advised me that he has a workstation that is having a
    problem with one specific update KB945432 on one specific machine. When
    he uninstalls the update his problem goes away. Automatic updates
    reinstalls the update on the proper schedule and then his problem comes

    My question is....is there anyway of setting up someting to "deny" an
    update to a group or specific machine that will over-ride the approval
    in the "all workstations" group.
    Tom Svehla, May 14, 2008
    1. Advertisements

  2. PA Bear [MS MVP], May 14, 2008
    1. Advertisements

  3. On the workstation, from an account with administrative privileges, run the
    WUA in interactive mode, select "Custom", and choose to IGNORE the
    misbehaving update.

    There is no way to do this from the WSUS Console, short of setting up a
    custom group for that one PC.

    Obviously you'll also want to isolate and remediate the issue preventing the
    use of this critical Outlook Security Update.

    Lawrence Garvin, M.S., MCITP, MCBMSP, MCTS(x4), MCP
    Senior Data Architect, APQC, Houston, Texas
    Microsoft MVP - Software Distribution (2005-2008)

    MS WSUS Website: http://www.microsoft.com/wsus
    My Websites: http://www.onsitechsolutions.com;
    My MVP Profile: http://mvp.support.microsoft.com/profile/Lawrence.Garvin
    Lawrence Garvin [MVP], May 16, 2008
    1. Advertisements

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments (here). After that, you can post your question and our members will help you out.