Using Kace's built in Windows Patch management, some of our PC got Internet Explorer 10 last week.  We do not want this.  How can we stop Kace from pushing it out?  Even if we delete it off the PC, wont Kace just see that it needs to be patched and process the update all over again? 


Answer Summary:
You can set discovered patches as inactive at the follow screen: security > patching > patch listing Just search for IE10, set as inactive. done.
0 Comments   [ - ] Hide Comments


Please log in to comment

Community Chosen Answer



I don't know which one it is, but you can disable the patch that updates IE.  Otherwise, you could deploy something like this: http://www.microsoft.com/en-us/download/details.aspx?id=36512

As a kscript: http://www.itninja.com/blog/view/k1000-script-to-disable-ie-10-upgrade

Answered 10/07/2013 by: jknox
Red Belt

  • I agree with disabling the patch. If you are subscribing to application patches make sure you are only downloading the ones that you need.

    I download app patches, but only for Flash and Reader. I have the patches join the Kbox as inactive so that I have to manually enable them before they patch. So if I do not want Abobe Reader XI I just never enable it.
Please log in to comment
Answer this question or Comment on this question for clarity



Ahh, yes the screen security > patching > patch listing was what i was looking for.  I did not know you could set patching as inactive here.  Thats handy.  Thanks for the assistance.

Answered 10/08/2013 by: ninja
Orange Belt

Please log in to comment
Nine Simple (but Critical) Tips for Effective Patch Management
This paper reviews nine simple tips that can make patch management simpler, more effective and less expensive.