Announcement

Collapse
No announcement yet.

block a specific ms update via policy?

Collapse
X
  • Filter
  • Time
  • Show
Clear All
new posts

  • block a specific ms update via policy?

    i need to go and manually uninstall kb945432 from all of our workstations as it is blocking the opening of jpg's sent from our graphics dept (all on macs). fine, i can do that. as all of our workstations use windows updates (as opposed to wus or any third party update solution), i need to figure out how to block this update from installing. is there any way to do this via policy?

    2003 standard sp2, wxp sp2.

    thx!

  • #2
    Re: block a specific ms update via policy?

    can you try disable software installation?

    use the name of the update:
    office2003-KB945432-FullFile-ENU.exe

    that should be enough to kill it from running.
    its easier to beg forgiveness than ask permission.
    Give karma where karma is due...

    Comment


    • #3
      Re: block a specific ms update via policy?

      d'oh! of course, it's so simple when you say it. thx!

      Comment


      • #4
        Re: block a specific ms update via policy?

        a followup question, if i may:

        okay, i'm an idiot. i have not been able to figger out the correct convention to block this from installing. here's what i've done: on a client box, opened secpol.msc|software restriction policies|additional rules. i then added a new path rule. for the value, i've tried

        office2003-KB945432-FullFile-ENU.exe
        %systemroot%\office2003-KB945432-FullFile-ENU.exe
        %windir%\office2003-KB945432-FullFile-ENU.exe

        and then, reboot for good measure. none of these has worked. i'm thinking maybe i need to point to the %userdir%\local settings\temp directory, maybe. but before i start just trying path after path after path, perhaps someone can show me the error of my ways...

        thx!

        Comment


        • #5
          Re: block a specific ms update via policy?

          i could really use some help on this. anyone?

          Comment


          • #6
            Re: block a specific ms update via policy?

            Maybe not quite the answer but you could look at WSUS as you can block update through this and save bandwidth by having all clients update from this instead of individually.
            cheers
            Andy

            Please read this before you post:


            Quis custodiet ipsos custodes?

            Comment


            • #7
              Re: block a specific ms update via policy?

              well, we're certainly not going to purchase, install and configure wsus for just this one update. thx, though. but, i've been searching and searching, and apparently, ms is aware of this issue and is supposed to be releasing an updated patch this month sometime. fingers crossed...

              Comment


              • #8
                Re: block a specific ms update via policy?

                WSUS is free and not much work to install.

                http://www.microsoft.com/downloads/d...displaylang=en

                but I can understand it probably is overkill for what you want in this situation.
                Last edited by AndyJG247; 3rd April 2008, 00:22.
                cheers
                Andy

                Please read this before you post:


                Quis custodiet ipsos custodes?

                Comment


                • #9
                  Re: block a specific ms update via policy?

                  aren't i the dumbass? i had no idea wsus was free. thx, i think it's worth looking into for the future.

                  Comment


                  • #10
                    Re: block a specific ms update via policy?

                    Originally posted by shmengie View Post
                    aren't i the dumbass? i had no idea wsus was free. thx, i think it's worth looking into for the future.
                    A bit but how many PCs in your organisation? WSUS can run in a VS if necessary and it means you have central control for all your updates. If you have 50 XP PCs and the last Super Tuesday patch was about 15MB, that means 15MB x 50 PCs equals 750MB of bandwidth being used for one small patch release. XP SP2 was 266MB or just over 13GB of bandwidth. Just think how much bandwidth is used each year by individual machines doing their own updates (Windows and Office) from Microsoft.

                    http://technet.microsoft.com/en-us/wsus/default.aspx

                    On top of this you have central control for all updates.
                    1 1 was a racehorse.
                    2 2 was 1 2.
                    1 1 1 1 race 1 day,
                    2 2 1 1 2

                    Comment


                    • #11
                      Re: block a specific ms update via policy?

                      Didn't know it was free either!
                      ** Remember to give credit where credit is due and leave reputation points where appropriate **

                      Comment


                      • #12
                        Re: block a specific ms update via policy?

                        Also if you feel like downloading all updates is overkill for your situation , you can set WSUS to download and approve the updates, while redirecting workstations to the MS update server for the actual download of the patch.

                        You might want to do this in the short them and then turn on update downloads (if you have a multi-version and multi-language env., it's easy to have 50gigs of patches to download first!)
                        VCP on vSphere (4), MCITP:EA/DBA, MCTS:Blahblah

                        Comment

                        Working...
                        X