How to prevent certain machines from receiving IE updates through SCCM/WSUS

Hello

For a majority of our environment, IE updates are fine and necessary. I have a couple servers I need to exclude IE updates from, however, yet still deploy other OS & application updates to them.

I'm not using ADR's currently. I'm manually creating my Update groups monthly. My update groups are based on the month and contain all OS & Application updates applicable to that month. I do not currently separate IE, Office, SQL, and other updates into separate groups. I try to keep my update groups to a minimum as I have upwards of 20 separate collection/deployments per month.

These servers that do not want IE updates are populated in existing collections already with other production servers.

How would you recommend doing this? Do I need to create a separate collection for just these servers? And then a separate Update Group for just IE updates and not target this collection with that IE update group? Is there an easier way to omit servers in an existing collection from receiving particular updates that are part of a larger update group?

Thanks.

March 24th, 2015 10:55am

Hi,

yes that would be the way to do it, create either a separate Software Update Group with the IE Settings and don't deploy them to the Collection with the servers that shouldn't have them or create to Software Update groups one with the IE updates and all the rest of the update and one without, there is no way to "exclude" a server from getting a update in a Software Update group...

Regards,
Jrgen

Free Windows Admin Tool Kit Click here and download it now
March 24th, 2015 11:35am

This topic is archived. No further replies will be accepted.

Other recent topics Other recent topics