28,661 questions
We are 2 years later, what is the solution? how can we manage companies with Intune if we can't block KB's causing issues ....
How to block a particular KB updating on windows devices using Intune
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(300.8, 40%, 39%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ES0%3C/text%3E%3C/svg%3E)
svjs-0437
201
Reputation points
KB5017308 is causing issue in our infra. We have update rings set on all co-manged devices because of this the KB is already installed on device and now its causing trouble due to known issues. Is there a way to block this KB from installing via Intune policy or can this be removed from devices where it is already installed?
Windows for business Windows Client for IT Pros User experience Other
Microsoft Security Intune Other
5,569 questions
3 answers
Sort by: Most helpful
-
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(240, 64%, 33%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EL%3C/text%3E%3C/svg%3E)
Liwa 15 Reputation points2024-05-15T08:54:06.5566667+00:00 -
Jason Sandys 31,406 Reputation points Microsoft Employee Moderator2024-05-15T14:34:02.96+00:00 Sorry, not sure what you are looking for here. The limitation here is not Intune. There are no separate KBs to block anymore and there hasn't ever been in Windows 10 or 11. Windows 10 introduced the monthly cumulative update model and completely eliminated granular hotfixes/patches for Windows. Anything outside of these monthly CUs are not required at the time they are made available but are just rolled into the next monthly CU. This is not in any way Intune specific and is the case no matter which update tool you use.
Most/many fixes that are part of the monthly CUs can be disabled using Known Issue Rollback (KIR): https://techcommunity.microsoft.com/t5/windows-it-pro-blog/known-issue-rollback-helping-you-keep-windows-devices-protected/ba-p/2176831
Sign in to comment -
-
ESWARARAJU KONETI 2,206 Reputation points MVP Volunteer Moderator2022-10-25T16:33:18.343+00:00 Intune doesn't have any control on the what updates to install or remove and it doesn't provide any media to the devices as well , it simply control the windows update settings such as when to install, when to reboot etc.
If you know there is an issue with updates, all you can do is, pause the update ring or uninstall the update ring policy.
You can use powershell script or create win32 app to remove the specific patch from the devices where it is installed using the detection rule or so.
Thanks,
Eswar
www.eskonr.com -
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(67.2, 68%, 16%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ELT%3C/text%3E%3C/svg%3E)
Limitless Technology 44,746 Reputation points2022-10-30T09:46:56.663+00:00 Hello there,
There is no built-in way to do that. You could pause Quality updates https://learn.microsoft.com/en-us/intune/protect/windows-update-for-business-configure#pause but not block a specific update
Unfortunately there is no solution for this and I wonder if it is ever going to be. Also because most updates are cumulative. We decided in this case to use an onpremises WSUS server and with setting the registry keys to point to the WSUS server, the devices will only look for updates from this server and not directly online. With other policies we made sure that the user cannot override this.
--------------------------------------------------------------------------------------------------------------------------------
--If the reply is helpful, please Upvote and Accept it as an answer--