Deployment Solution

 View Only
  • 1.  Prevent a Windows update from being deployed to a handful of servers

    Posted Feb 22, 2016 06:18 PM

    We use Altiris for patch management.  I have a small group of servers that I need to block a particular update from applying.  Is there a way to prevent Altiris from deploying an update to just a handful of servers?  If you configure Windows update on the client to hide an update, will Altiris still push that update if nothing else is done or will Altiris not see that the client is qualified for this update?



  • 2.  RE: Prevent a Windows update from being deployed to a handful of servers

    Posted Feb 23, 2016 06:41 AM
    Just create a Filter with those computers in and make sure your Target for those patches excludes the Filter. You could also exclude the Filter from the {Settings > Software > Patch Management > [OS] Settings > [OS] Patch Remediation Settings >] The Default Resource Target....


  • 3.  RE: Prevent a Windows update from being deployed to a handful of servers

    Posted Feb 23, 2016 01:56 PM

    Thanks for the reply.  We have our servers broken up in various filters, with groups of servers receiving updates each week.  That said, would I:

    Create the filter as suggested and add the machines to specifically exclude these updates to.

    Next, go to Home / Software Bulletin Details / search for bulletin, right click /Distribute Software / Create a new policy / Apply To / then exclude computers in the filter I created? 

    If I'm thinking this through correctly, this leaves all patch policies in tact for all other filters, and tells the few computers in the new filter from receiving these updates.



  • 4.  RE: Prevent a Windows update from being deployed to a handful of servers

    Posted Feb 23, 2016 06:57 PM

    I ran this idea past someone in our org who has knowledge of how this was implemeneted. I was told that I went this route, I would have to move these servers into this new filter, and then create two patch policies each month, one for the general population and one for this one filter with these patches excluded.  I ended up pulling the patch for the policy and will wait for a revision or the 3rd party affected to come out with a patch.