I thought after reaching out to support we had this working, but it appears to not be working now.
Here's the previous thread with the settings I had (have) set when it was working
https://www-secure.symantec.com/connect/forums/patch-software-best-practice
I rechecked my settings against what I posted in that thread (when I had it working prevoiusly) and support seems stumped.
Can anyone confirm their settings and confirm patches disabled are actually being removed from the server?
In log viewer (attached) it seems to show 2 orphaned linux packages getting deleted (we don't use linux) and nothing for windows.