Thanks Sherry.

-Harjit

From: [email protected] [mailto:[email protected]] On 
Behalf Of Sherry Kissinger
Sent: Wednesday, July 13, 2016 3:20 PM
To: [email protected]
Subject: Re: [mssms] SCCM Patch Exclude To Some Systems

Here's my guess.
1) you have a SUG with everything else except that 1 specific path.  That SUG 
is deployed already to the two existing collections.
2) You stated: "The exclusion patch that I need to apply is to some systems in 
the “Software-Updates-Delay” collection. I have a SUG created for this patch in 
question and a collection “Exclude-Patch” which includes the systems that I 
cannot deploy this patch to. "   So, SUG #2, this one contains that one, single 
patch.

Things left to do:
3) Create another Collection, called "Software-Updates-Delay excluding Those 
Special Systems".  In that Collection, you'll have two rules.  INCLUDE 
"Software-Updates-Delay" collection.  EXCLUDE "Exclude-Patch"
4) Target SUG#2, with that 1 single patch, to "software-updates-delay excluding 
those special systems", with the same deadline as SUG #1.

And there you go.


On Wed, Jul 13, 2016 at 1:35 PM, Adam Juelich 
<[email protected]<mailto:[email protected]>> wrote:
You should be able to look at the properties of the Software Update and then 
exclude or include in existing SUGs....



On Wed, Jul 13, 2016 at 8:45 AM, Harjit Dhaliwal 
<[email protected]<mailto:[email protected]>> wrote:
I need to exclude a patch to a subset of systems with SCCM. I have two custom 
collections that I deploy patches to.


1.       Software-Updates-Delay – Patches deployed to this collection are made 
available today and they become mandatory for install next Monday. This is to 
give end users time to patch at their schedule and complete reboots as they 
need depending on their business hour needs.

2.       Software-Updates-NoDelay – Patches are deployed to this collection to 
apply immediately, however, sub collections in this collection have maintenance 
windows after midnight and therefore the patches and reboots don’t apply until 
then. This collection is for servers.

The exclusion patch that I need to apply is to some systems in the 
“Software-Updates-Delay” collection. I have a SUG created for this patch in 
question and a collection “Exclude-Patch” which includes the systems that I 
cannot deploy this patch to. What’s the best way to achieve my exclusion patch 
goal to the “Exclude-Patch” systems without excluding all other patches that 
they will need?
Thanks.

-Harjit






--
Thank you,

Sherry Kissinger

My Parameters:  Standardize. Simplify. Automate
Blogs: http://www.mofmaster.com, http://mnscug.org/blogs/sherry-kissinger, 
http://www.smguru.org


Reply via email to