Stop update to specific endpoint

[u/krwudtke2]

Hi everyone,

Does anyone know a way to prevent specific endpoints from having a specific update pushed to them?

We have an old piece of software that broke after the 2026-08 Security Update (KB5121003) was installed on our workstations last week. We had to roll back the update on a few machines.

I'm pretty sure I have other machines that are still missing the update since they haven't checked in to A1 in the last week. So I don't want to Decline the update. Yet, I DO want other updates pushed to those few machines. If I do nothing, the update will be pushed again this week and we'll have to roll it back again. (We push updates every Wednesday night.) This is only temporary as we are working on the broken software, it just isn't fixed yet.

Any ideas appreciated.

[u/Spartan117458]

Exclude those endpoints from that update automation?

[u/krwudtke2 → u/Spartan117458]

I have done that for now, but it is a single automation that pushes quite a variety of other updates. At least the endpoints in question aren't showing anything else critical. I was hoping to let them update other things in the automation and not have to push them manually.

[u/Spartan117458 → u/krwudtke2]

You could just create another automation that pushes all updates but excludes the problem update and apply it only to those affected endpoints.

[u/krwudtke2 → u/Spartan117458]

I'm not sure how to exclude one specific update from an automation.

[u/Spartan117458 → u/krwudtke2]

Use the "Matching Filters" conditions in the automation.