Scripting

There is a huge primer on smart labels here. But I believe you are asking for instructions on how to implement the directions from your first post on how to remove certain KB's.

You may want to check out this post. It is discussing something pretty similar. Definitely search on the site, your question has probably been answered in the past. I found this KKE that discusses smart labels from about the 14 minute mark for about 15 minutes.

To answer your specific question (steps stolen directly from n1md4 post in that other thread):

1. Go to device inventory
   
2. Click Smart Label
3. Criteria = Software Titles contains KB3172605
4. Choose label, type in KB3172605, hit the enter key. Then click Test, make sure it works. Then click save.
5. Do the same thing for KB3161608
6. Go to Security - Patch Management - Catalog
7. Click Smart Label
8. Package = KB3172605, test and save as KB3172605
9. Do the same thing for KB3161608
10. Go to Security - Patch Management - Schedules
11. Choose Action - New
12. Name: Rollback KB3172605 and KB3161608
    
13. Configure: Device Labels, manage associated labels, choose KB3172605 and KB3161608
14. Configure: Action: Detect and Rollback
    
15. Detect: Patch Labels, manage associated labels, choose KB3172605 and KB3161608
16. Rollback: Labels, manage associated labels, choose KB3172605 and KB3161608
17. Fill out the rest of the schedule as needed and then save it.
18. Then put the checkbox on the new schedule you created and run it.

Keep in mind, not all KB's can be rolled back and you may have to do this the way that taylor-madeak talked about in the thread I posted earlier.

Also note, you can only target smart labels, once your inventory has cycled through an inventory check-in (could take a few hours depending on your environment). If you're wanting to do it on-demand, you might want to create a manual label instead of smart label.