Uninstall Patch Through Wsus

This has been a few months in the making to get what I think is a decent build of my WSUS Administrator Module. My goal with this module was to make something that.

Oozle Finch, on Tue 27th Dec 2005, pm, said:

1 When you authorize patches, there are several options: detect only, remove, decline, and install. In my environment I have 3 or 4 different computer groups that I authorize different patches for. Authorizing install has not been a problem. However, here is my problem: I chose the remove setting for several patches that I know can be uninstalled manually this is for W2K PRO machines. However, WSUS told me that these patches cannot be removed.. Did I miss some setting or something. Is it a functionality issue with WSUS. Is it a W2K PRO issue. Basically, why can t I uninstall patches via the WSUS console.

Apparently, this has to do with the method of installtion. The engine WSUS uses is different than if a patch was installed locally. Currently, there are VERY few patches/updates that support uninstallation via WSUS. This is planned to change over time, as MS builds the ability into it s patches.

Quote

2 In the GPO I have set our client machines to check in every 12 hours and automatically download and install patches at everyday. I realize that there is a time variance of plus/minus 0-20 as to when they check-in. However, how do you know when the every 12 hours is actually calculated from. Is it every 12 hours from PC startup. Is it 12 hour from the last time it checked-in. And, correct me if I am wrong, but the actual patch downloading will take place when the PC checks in with the WSUS server -not at the scheduled install time, right. Or am I wrong.

It is 12 hours from last checkin. If your computer is off when the next checkin time occurs, the computer will checkin once it is booted again. It will not skip a detection/report cycle unless there is an error communicating with the server. The computer downloads the patches at detection/report cycles, not at installation cycles.

3 What happens if a PC misses a scheduled check-in time because it was either powered off or not on the LAN. Does it then check-in as soon as it powered on or back on the LAN. Or, does it just skip the missed cycle and wait for the next scheduled check-in time.

see my response for 2.

Deploying SCCM 2012 Part 5, Installing WSUS, Configuring Firewall Exceptions, Opening Ports For SQL Replication.

BatchPatch is a software patch management tool. Remotely initiate Windows Update, WSUS, software deployments, and reboots on many computers, simultaneously.

Installing WSUS,Configuring Firewall Exceptions,Opening Ports for SQL Replication,SCCM 2012 SP1 SQL ports,SCCM 2012 SP1 Firewall exceptions.

Summary: Guest blogger, Boe Prox, shows how to use Windows PowerShell to approve or to decline updates for WSUS. Microsoft Scripting Guy, Ed Wilson, is here.