If you have your limiting collections tiered such that all deployments go to something underneath All Systems (something like All Windows Workstations… etc) you could put your machines into a collection that is limited to All Systems, and then use this collection as an exclude rule to your collection that the top of your deployment tier. Then they’ll never even get policy for those deployments.
From: [email protected] [mailto:[email protected]] On Behalf Of Daniel Ratliff Sent: Monday, August 25, 2014 9:19 AM To: [email protected] Subject: RE: [mssms] Is it possible to have a Maitenance Window that prevents any deployments? Also note that if you have any deployments set to Ignore Maintenance Windows, adding Trevor’s suggestion below will not help. You will still need to stop CCMexec, etc. You could setup a client policy to disable what you need? But I know there are some limitations there as well. Daniel Ratliff From: [email protected]<mailto:[email protected]> [mailto:[email protected]] On Behalf Of Trevor Sullivan Sent: Monday, August 25, 2014 9:13 AM To: [email protected]<mailto:[email protected]> Subject: RE: [mssms] Is it possible to have a Maitenance Window that prevents any deployments? Sure, just create an All Deployments Maintenance Window that is 40 years in the future, and apply it to those machines. If you’re especially worried about these systems, then you could always consider disabling the ccmexec service, or removing the ConfigMgr client altogether, but then you’d lose other ConfigMgr features like Compliance Settings rules, Inventory reports, and so on. It all depends on how critical these systems are during that period. Cheers, Trevor Sullivan Microsoft PowerShell MVP [cid:[email protected]]<https://urldefense.proofpoint.com/v2/url?u=http-3A__mms.mnscug.org_&d=AAMGaQ&c=aLnS6P8Ng0zSNhCF04OWImQ_He2L69sNWG3PbxeyieE&r=pQGVi_ygWZb0EWR_EeMFzgKJCQ8AFTQI7Ck6iiIPItI&m=ncsEcxl6QAwyvsP7PVf0LwMu-JI_JlaLtZpLXmxLKts&s=Qn6aeWZxdHxWs7Afm55s1CszfNAi8y3hL6iVJEU5m2Y&e=> From: [email protected]<mailto:[email protected]> [mailto:[email protected]] On Behalf Of [email protected]<mailto:[email protected]> Sent: Monday, August 25, 2014 8:02 AM To: [email protected]<mailto:[email protected]> Subject: [mssms] Is it possible to have a Maitenance Window that prevents any deployments? Crazy question but I need to lock down a specific set of machines for a 30 day window. Is it possible to prevent deployments entirely? Anyone have a suggestion? Appreciate the help Thanks The information transmitted is intended only for the person or entity to which it is addressed and may contain CONFIDENTIAL material. If you receive this material/information in error, please contact the sender and delete or destroy the material/information. ________________________________ CONFIDENTIALITY NOTICE: This email contains information from the sender that may be CONFIDENTIAL, LEGALLY PRIVILEGED, PROPRIETARY or otherwise protected from disclosure. This email is intended for use only by the person or entity to whom it is addressed. If you are not the intended recipient, any use, disclosure, copying, distribution, printing, or any action taken in reliance on the contents of this email, is strictly prohibited. If you received this email in error, please contact the sending party by reply email, delete the email from your computer system and shred any paper copies. Note to Patients: There are a number of risks you should consider before using e-mail to communicate with us. See our Privacy & Security page on www.henryford.com for more detailed information as well as information concerning MyChart, our new patient portal. If you do not believe that our policy gives you the privacy and security protection you need, do not send e-mail or Internet communications to us.
