Deny Specific Update

[utvol]

Hello,

 

We have successfully implemented SCCM/WSUS using the "phased" collection approach. Our collections are based upon the computer OU membership.

 

We have a subset of PCs (approx. 20 out of 1500) that are running a particular software that is not compatible with one of the MS Cumulative Active Killbit updates. With WSUS we could "not approve" a specific patch for installation based upon computer group membership, but I'm not finding any options like this in SCCM.

 

Until the problem is resolved with the software company, is there anyway in SCCM to disable specific patch installation for specific computer without starting a completely different deployment? or Any other suggestions?

 

Thanks for your help.

[Peter van der Woude]

The only way to do this is (like you already suggested yourself) to not put the update in the deployment.

[utvol]

I was hoping I could hide the update using a registry edit, but haven't found any good solution. Thanks for your help.