Thanks Sherry. -Harjit
From: [email protected] [mailto:[email protected]] On Behalf Of Sherry Kissinger Sent: Wednesday, July 13, 2016 3:20 PM To: [email protected] Subject: Re: [mssms] SCCM Patch Exclude To Some Systems Here's my guess. 1) you have a SUG with everything else except that 1 specific path. That SUG is deployed already to the two existing collections. 2) You stated: "The exclusion patch that I need to apply is to some systems in the “Software-Updates-Delay” collection. I have a SUG created for this patch in question and a collection “Exclude-Patch” which includes the systems that I cannot deploy this patch to. " So, SUG #2, this one contains that one, single patch. Things left to do: 3) Create another Collection, called "Software-Updates-Delay excluding Those Special Systems". In that Collection, you'll have two rules. INCLUDE "Software-Updates-Delay" collection. EXCLUDE "Exclude-Patch" 4) Target SUG#2, with that 1 single patch, to "software-updates-delay excluding those special systems", with the same deadline as SUG #1. And there you go. On Wed, Jul 13, 2016 at 1:35 PM, Adam Juelich <[email protected]<mailto:[email protected]>> wrote: You should be able to look at the properties of the Software Update and then exclude or include in existing SUGs.... On Wed, Jul 13, 2016 at 8:45 AM, Harjit Dhaliwal <[email protected]<mailto:[email protected]>> wrote: I need to exclude a patch to a subset of systems with SCCM. I have two custom collections that I deploy patches to. 1. Software-Updates-Delay – Patches deployed to this collection are made available today and they become mandatory for install next Monday. This is to give end users time to patch at their schedule and complete reboots as they need depending on their business hour needs. 2. Software-Updates-NoDelay – Patches are deployed to this collection to apply immediately, however, sub collections in this collection have maintenance windows after midnight and therefore the patches and reboots don’t apply until then. This collection is for servers. The exclusion patch that I need to apply is to some systems in the “Software-Updates-Delay” collection. I have a SUG created for this patch in question and a collection “Exclude-Patch” which includes the systems that I cannot deploy this patch to. What’s the best way to achieve my exclusion patch goal to the “Exclude-Patch” systems without excluding all other patches that they will need? Thanks. -Harjit -- Thank you, Sherry Kissinger My Parameters: Standardize. Simplify. Automate Blogs: http://www.mofmaster.com, http://mnscug.org/blogs/sherry-kissinger, http://www.smguru.org

