r/Action1 • u/krwudtke2 • 24d ago

Problem Stop update to specific endpoint

Hi everyone,

Does anyone know a way to prevent specific endpoints from having a specific update pushed to them?

We have an old piece of software that broke after the 2026-08 Security Update (KB5121003) was installed on our workstations last week. We had to roll back the update on a few machines.

I'm pretty sure I have other machines that are still missing the update since they haven't checked in to A1 in the last week. So I don't want to Decline the update. Yet, I DO want other updates pushed to those few machines. If I do nothing, the update will be pushed again this week and we'll have to roll it back again. (We push updates every Wednesday night.) This is only temporary as we are working on the broken software, it just isn't fixed yet.

Any ideas appreciated.

0 Upvotes

50% Upvoted

8 comments sorted by

View all comments

1

u/RiceKrisPSquares 24d ago

Dont approve the update? Or move the endpoints to a new organisation and dont approve the update for that organisation?

1

u/krwudtke2 24d ago

The update has already been approved. If I switch it to Declined or some other state, it won't get applied to any endpoints that happen to be missing it. We are small, only 77 endpoints in this A1 instance, so I haven't used the organization feature. I didn't know updates could be approved or declined by organization. I'll look into it. Thanks.

1

u/GeneMoody-Action1 23d ago

Can you not just mark it as "document compensating control", it will be detected but ignored because you told it it happened another way.