URGENT - Disable Updates in SCCM (2024)

It looks like we have a bad windows update in SCCM thats causing clients to blue screen. How to i disable windows update in SCCM or ADR so that other clients dont update?
Thanks

EDIT: Looks like a bad windows Update https://www.windowslatest.com/2021/0...pcs-with-bsod/ and relating to kyocera printers/copiers. If someone can let me know how to temporiliy stop the ADR/Windows updates being deployed, at least then i can save a few clients!

Its definitely pointing to issues with the updates KB5000802, KB5000808 and KB5000809 . How can i roll back updates on clients that were deployed via SCCM and would i have to disable that update in SCCM or WSUS?

Great. We have Kyocera MFDs as our follow-me fleet and I can see that our SCCM synced updates last night (being patch Tuesday and all).

The easiest way to stop the updates to clients would be to remove the deployment: Software Library > Overview > Software Updates > Software Update Groups. Then select the ADR baseline/update group, select the Deployment tab in the bottom window and remove the collection that the ADR has been deployed to.

Thanks for the warning though. I'll remove our Windows 10 updates ADR from clients now.

Originally Posted by CHiLL

Great. We have Kyocera MFDs as our follow-me fleet and I can see that our

SCCM

synced updates last night (being patch Tuesday and all).

The easiest way to stop the updates to clients would be to remove the deployment: Software Library > Overview > Software Updates > Software Update Groups. Then select the ADR baseline/update group, select the Deployment tab in the bottom window and remove the collection that the ADR has been deployed to.

See Also

How to Fix the Issue - Windows 10 Software Center Is Missing? - MiniTool4 Best Ways to Repair SCCM Client Agent | Fix ConfigMgr Agent IssuesInstalling Windows Software via Software CenterWhat is the ccmcache folder used for and how to clear it [RESOLVED]

Thanks for the warning though. I'll remove our Windows 10 updates ADR from clients now.

Thanks. Ive create a task sequence to uninstall the windows update but im getting this error on the clients when run. Does anyone know why?

"Task sequence 'Uninstall KB5000809' has failed with the error code 0x00000057 in the task sequence step 'Uninstall KB5000809'. For more information, contact your system administrator or helpdesk operator."

Originally Posted by techie17

Thanks. Ive create a task sequence to uninstall the windows update but im getting this error on the clients when run. Does anyone know why?

"Task sequence 'Uninstall KB5000809' has failed with the error code 0x00000057 in the task sequence step 'Uninstall KB5000809'. For more information, contact your system administrator or helpdesk operator."

I'm not sure why that's happening.

I have found that the update also KB5000802 is also deployed to my Office 2019 and SCEP ADR groups, I'm not sure why. I might have to disable those too.

I think the best way to remove the update from your SCCM Software Update Groups (instead of removing the update deployment entirely):

Software Library > Overview > Software Updates.

Search for the update in question, select the update(s) from the list (can select multiple). Right click and select Edit Membership. After the list populates, remove the check from all groups that the update is listed in and press OK.

When you search for the update again, the "Is Deployed" column should change from "Yes" to "No".

The related updates for those wanting to remove/decline/approve uninstall are:

Windows 10 version 1803 — KB5000809 (OS Build 17134.2087)
Windows 10 version 1809 — KB5000822 (OS Build 17763.1817)
Windows 10 version 1909 — KB5000808 (OS Build 18363.1440)
Windows 10 version 2004 and 20H2 — KB5000802 (OS Builds 19041.867 and 19042.867)

Just removing it now with the below command, replace kb article with relevant kb:
wusa /uninstall /kb:5000809 /quiet

And '2021-03 Cumulative Update for Windows 10 Version 1607 for x64-based Systems (KB5000803)....?

If anyone has got that installed...?

Asking for a friend...

Are people still printing? I thought WFH had killed printing?
I'm guessing the 1607 (yes you should upgrade Windows 10 unless using LTSC) patch will be very similar to the Server 2016 patch. I wonder if that will break your print Server if you have Kyocera Printers.

Originally Posted by free780

Are people still printing? I thought WFH had killed printing?

Just like how we're now a "paperless" school?

Hello.
We have the same issue. We don’t have windows server setup so I’m trying to send out a start-up script to remove this update. I would like it to remove the update silently but prompt for a restart.
I tried this line via my laptop in command prompt but hasn’t worked
wusa /uninstall /kb:5000808 /quiet /promptrestart
I tried this one too but no luck
wusa /uninstall /kb:5000808 /quiet

Any help would be much appreciated

Wusa only works if you are running it once logged in to the workstation

Otherwise via logon script is a viable option

Code:

start /wait /min DISM.exe /Online /Remove-Package /PackageName:Package_for_RollupFix~31bf3856ad364e35~amd64~~18362.1440.1.7 /quiet /norestart

has been working for other schools in our MAT who don't have a SCCM server. that will uninstall 5000808 on Windows 10 1909.

Thank you so much for this!

So If I set this up as a startup script it will remove the update but will not restart the machine.

Will then the users have to restart their pc to finish the uninstallation process?

Thanks

Originally Posted by dibekem

Thank you so much for this!

So If I set this up as a startup script it will remove the update but will not restart the machine.

Will then the users have to restart their pc to finish the uninstallation process?

Thanks

Logon script, not start up

Users will need to restart the computer for it to complete. You can remove the norestart switch if you wish to force it but that might upset your users

Thank you.

I will keep the norestart in place.

Do you know the package name for KB5000802?

I need to remove that too but cannot find the name for it.

Thank you very much in advance!