Kops Posted September 18, 2014 Report post Posted September 18, 2014 Today I was asked to prevent IE 11 from installing on our computers through SCCM updates. Currently, we are doing updates on a tiered schedule (small test group, then 1 week delay to IT, then 1 week delay to rest of org), however, we are pushing updates for all categories (see updates1.png) At this point, IE 11 has been deployed to 136 of our 470 devices (see updates2.png). I would like to prevent any future deployments, but I can't seem to find a way to remove the IE 11 update. Can anyone advise the best practice for this? Quote Share this post Link to post Share on other sites More sharing options...
kman-dk Posted September 18, 2014 Report post Posted September 18, 2014 Hi, You can right click the update, and edit membership. Just remove it from the deployed collection. /kman Quote Share this post Link to post Share on other sites More sharing options...
Steve G. Posted September 22, 2014 Report post Posted September 22, 2014 Because of IE pushes, it is IMO unwise to automatically deploy the Update Rollup classification. However, there are extra steps I also take. I go into the WSUS console on the Software Update Point and decline the update. On the SCCM console under Software Updates, I created a folder to move all IE updates to. This helps prevent any kind of accidental deployment. Quote Share this post Link to post Share on other sites More sharing options...
