ML
    • Recent
    • Categories
    • Tags
    • Popular
    • Users
    • Groups
    • Register
    • Login

    Disable IE 10 updates via WSUS

    Scheduled Pinned Locked Moved IT Discussion
    wsus
    5 Posts 3 Posters 1.6k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • IRJI
      IRJ
      last edited by

      I am going to start with some background information. I have a WSUS server currently set to allow IE 10 updates across the board. Our OUs are split up by small branches 5-15 PCs. I created WSUS groups for each branch so I can control updates by location.

      We have a web based program that requires IE9. Only a handful of users in the same administrative location have used this program. So I created a separate OU called "No IE10" and update group with IE 9 disabled. I was able to copy the printer GPO from that location to that OU. So the users received the same printers there were used to receiving.

      The new request is to have this done on the manager's desktop at each branch. So I want to uninstall IE 10 on just their PCs, but leave IE10 on all the other PCs. Can I do this without going through the trouble of creating separate OUs and update groups for each branch?

      1 Reply Last reply Reply Quote 0
      • ?
        A Former User
        last edited by

        Well you need to use the Group Policy at that OU to put the computers in a different WSUS group. You can deny the update at that level which will prevent it from being installed. I don't think it will uninstall it if it was already installed though. Just prevents future installs.

        IRJI 1 Reply Last reply Reply Quote 2
        • ?
          A Former User
          last edited by A Former User

          The Group is set under Computer Configuration -> Policies -> Administrative Templates - > Windows Components -> Windows Update Enable client side targeting. You can find the WSUS Intranet location as well as update schedule stuff there too. Your WSUS server has to be set to use the client settings rather than it's own (meaning you have to manually group on WSUS)

          1 Reply Last reply Reply Quote 0
          • IRJI
            IRJ @A Former User
            last edited by

            @thecreativeone91 said:

            Well you need to use the Group Policy at that OU to put the computers in a different WSUS group. You can deny the update at that level which will prevent it from being installed. I don't think it will uninstall it if it was already installed though. Just prevents future installs.

            Well this is simple enough.

            http://community.spiceworks.com/topic/459889-wsus-declining-updates

            1 Reply Last reply Reply Quote 1
            • nadnerBN
              nadnerB
              last edited by

              I had to disable IE10 installs for similar reasons.
              Craptastic legacy applications that are pushed upon us 😞

              1 Reply Last reply Reply Quote 2
              • 1 / 1
              • First post
                Last post