Hi,

What's the best way to exclude specific software update from specific computer? It doesn't make sense to create special collection and special Software Update group just for one exclusion.

Urmas

The only way is to remove the computer from the collection where the update group is targeted to.

Simply do not deploy the update to the computer.

Well, I still want to deploy all future updates as well as keep all previous updates targeted. So I cannot remove the computer from collection where all my SUG's are deployed.

Let's say I have 50 computers and they all have one or two different specific updates that I need to exclude. I wouldn't make 50 different collections with 50 different SUG's with 50 deployemnts, would I? How can this kind of scenario be managed?

What's the requirement? Why excluding those update on just a subset of machines? The only way to exclude updates is not deploying them thus removing clients from a collection or not including them.

Well, I still want to deploy all future updates as well as keep all previous updates targeted. So I cannot remove the computer from collection where all my SUG's are deployed.

Let's say I have 50 computers and they all have one or two different specific updates that I need to exclude. I wouldn't make 50 different collections with 50 different SUG's with 50 deployemnts, would I? How can this kind of scenario be managed?

The real question is why would you want to exclude the PC from the SU?

As Torsten, said, the only way to do this is to exclude the PC from the collection.

Patching scope for our company is around 15000 computers. I deploy most of Windows and Office patches. I have SUG for Windows patches, witch is targeted to Collection of all computers in scope. Same for Office patches. I got request not to deploy one specific KB to one specific computer. So I will remove it from collection, but how I can deploy all the rest of the patchies to that computer? Only way that comes to my mind is to create sepcial collection for that computer. Then create new SUG, that has all the patches except this special one, and deploy it. Alright I can handle this one extra SUG. But what happens if I got 10-20-50 similar requests? This means that each patch Tuesday I have to manage 50 different SUG's and deployments?

I would do it another way. Create a collection and excluded that PC from the new collection. Create a SUG with only the one SU in it. This way you are only worrying about the exceptions.