Quest KACE SMA block Updates & Patches (EN)

Article in German: https://duesiblog.de/archives/1620-Quest-KACE-SMA-Updates-Patches-blockieren.html

How can I exclude individual updates or patches from being installed on my clients in the Quest KACE SMA? I can e.g. work with Smart Labels to simplify the process for me.

By clicking on the link you will be forwarded to YouTube.

KACE Updates blockieren YouTube VideoAutomatic Transcript

1.I create a manual label. I go to „Home“ -> „Label Management“ and create a new manual label. I call it z. B. „Updates blocked“. This is intended to mark individual updates that are not or not yet to be installed.

2. I add this label to the updates to be blocked. To do this, I switch to „Security“ -> „Patch Management“ in the menu and select the patches to which I want to add this label in order to block them.

3. Create Smart Label. Under „Home“ -> „Label Management“ -> „Smart Label“ I create a new smart label for patches. Here I select as a condition „Label name does not contain Update blocked“. So doesn’t include the name of the manual label I just created. If I test this condition, all patches that do not contain this label are displayed. If I instead select „Label name contains Update blocked“ as a test, I get exactly the patches to which I added this label. All I have to do now is enter and save a label name for the new Smart Label to be created.

4. Now I need to add this smart label to my patch schedule. In the menu I switch to „Security“ -> „Patch Management“ and select my schedule and there in the „Action“ step under „Detect“ I do not select all patches, but patches with the smart label I just created.

I wish you every success with it!

Stay blogged. 😎

Dein Matthias Düsi