Disable IE 10 updates via WSUS

IRJ

I am going to start with some background information. I have a WSUS server currently set to allow IE 10 updates across the board. Our OUs are split up by small branches 5-15 PCs. I created WSUS groups for each branch so I can control updates by location.

We have a web based program that requires IE9. Only a handful of users in the same administrative location have used this program. So I created a separate OU called "No IE10" and update group with IE 9 disabled. I was able to copy the printer GPO from that location to that OU. So the users received the same printers there were used to receiving.

The new request is to have this done on the manager's desktop at each branch. So I want to uninstall IE 10 on just their PCs, but leave IE10 on all the other PCs. Can I do this without going through the trouble of creating separate OUs and update groups for each branch?

Well you need to use the Group Policy at that OU to put the computers in a different WSUS group. You can deny the update at that level which will prevent it from being installed. I don't think it will uninstall it if it was already installed though. Just prevents future installs.

The Group is set under Computer Configuration -> Policies -> Administrative Templates - > Windows Components -> Windows Update Enable client side targeting. You can find the WSUS Intranet location as well as update schedule stuff there too. Your WSUS server has to be set to use the client settings rather than it's own (meaning you have to manually group on WSUS)

IRJ

@thecreativeone91 said:

Well you need to use the Group Policy at that OU to put the computers in a different WSUS group. You can deny the update at that level which will prevent it from being installed. I don't think it will uninstall it if it was already installed though. Just prevents future installs.

Well this is simple enough.

http://community.spiceworks.com/topic/459889-wsus-declining-updates

nadnerB

I had to disable IE10 installs for similar reasons.
Craptastic legacy applications that are pushed upon us