[Last Call] Learn how to a build a cloud-first strategyRegister Now

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 324
  • Last Modified:

Cannot block a windows update patch

There is an windows update that is crashing internet explorer on quite a few computers on my network.  I cannot block this patch, it keeps coming back no matter what I try.  I have WSUS running on a server.  Here is what I have tried so far:

1.  Declined update in WSUS
2.  Approved update for removal in WSUS
3.  Modified registry on workstation to temporarily allow access to windows update.  I hide the update when prompted to install.

All of these attempts to block this particular update have failed and I am out of ideas.
0
schwientekd
Asked:
schwientekd
  • 7
  • 4
1 Solution
 
Donald StewartNetwork AdministratorCommented:
Which update??
0
 
schwientekdAuthor Commented:
KB3008923
0
 
Donald StewartNetwork AdministratorCommented:
0
What does it mean to be "Always On"?

Is your cloud always on? With an Always On cloud you won't have to worry about downtime for maintenance or software application code updates, ensuring that your bottom line isn't affected.

 
schwientekdAuthor Commented:
The issue I am experiencing is not affecting just IE11.  Any idea how to block an update?
0
 
Donald StewartNetwork AdministratorCommented:
Have you installed http://support.microsoft.com/kb/3025390 to verify whether your issue remains ??
0
 
Donald StewartNetwork AdministratorCommented:
0
 
schwientekdAuthor Commented:
Yes, I have already attempted this method of hiding the update and it keeps coming back.
0
 
Donald StewartNetwork AdministratorCommented:
And KB3025390  ??
0
 
schwientekdAuthor Commented:
Again, 3025390 is for IE 11 only.  I have this issue on IE 10 and IE 9.
0
 
Donald StewartNetwork AdministratorCommented:
Up until now you never said anything of  IE 10 and IE 9.

I would then use psexec or a startup batch file to uninstall the update

wusa /uninstall /kb:3008923  /quiet /norestart

psexec \\* -s -h -d wusa /uninstall /kb:3008923  /quiet /norestart

the "*" will enumerate your whole domain and run the command on every pc in your domain. I wouldnt worry about it running on pc's that dont have the update installed.

Declining it in WSUS should have been enough, you probably just experienced an issue where the update had already been downloaded to PC's and was scheduled to install prior to declining it.
0
 
Donald StewartNetwork AdministratorCommented:
0

Featured Post

VIDEO: THE CONCERTO CLOUD FOR HEALTHCARE

Modern healthcare requires a modern cloud. View this brief video to understand how the Concerto Cloud for Healthcare can help your organization.

  • 7
  • 4
Tackle projects and never again get stuck behind a technical roadblock.
Join Now