Windows Update/Remove individual update (requires KB ID)

[Mattias.Kihl]

Im trying to unistall a KB with batchpatch, everythings seems fine. It uninstalls the KBb when the computer reboots. The kb is declined in wsus server. But the computer installs the patch from wsus again. Is this normal behavior? Must i approve the patch for removal on the wsus server?

Thanks for help?

[doug]

Hello Mattias – In order to prevent the computer from seeing the update as available for installation you must decline the update in WSUS. If you are saying that you already declined it in WSUS but it’s still appearing as available on the target computer then I would question if the search for updates is actually taking place against the WSUS server. In BatchPatch under ‘Tools > Settings > Windows Update’ make sure that the ‘Server Selection’ is set to ‘Default / Managed’ and not ‘Windows Update’ or ‘Microsoft Update.’ Also, verify the configuration of the target machine to confirm it’s pointing at your WSUS server. You can use the ‘Actions > Windows Update > Get Windows Update config’ option in BatchPatch to confirm. If you’re still seeing the update on the computer then I’m not sure why, but it’s not related to BatchPatch. BatchPatch simply reports the updates that the computer shows as available. If BatchPatch is showing that update, then if you launch the Windows Update interface directly on the machine it will also show the update if it’s searching the same update server.

In any case, another option is to “hide” the update either using the Windows Update interface or using BatchPatch. If you choose to hide it with BatchPatch it will still be available to the computer but will no longer appear anywhere until/unless you later unhide it. The hide/unhide option is equivalent to launching the Windows Update interface on the target computer and right clicking on the update and choosing “hide update.”

-Doug

[Author]

Posts