Blocking Cumulative Updates in Patch Management

Olioty · 2025-08-14T08:34:43+00:00

There was an error rendering this rich post.

Hello,

I would to block an update from Microsoft with ID KB5063878 in Patch Management, how can i do this, Can you tell me how can i do this please
i just skip install auto :

regards

Find more posts tagged with

Windows

Software Updater

EPP

Accepted answers

All comments

Sethu Laks

Hi @Olioty

Thank you for connecting with the WithSecure Community

If you need to block a particular update, such as KB5063878, you can do this by creating an exclusion rule in the Software Updater settings of your profile in the WithSecure Elements Security Center.

How to block a Microsoft update by Bulletin ID:

Log in to WithSecure Elements Security Center.
In the sidebar, go to Security Configurations → Profiles.
Select the profile you want to edit (note: profiles can only be modified at the level they were created).
In the profile settings, open Software Updater.
Find Exclude software from automatic installation and click Add rule.
In the Rule column, choose Bulletin ID equals to.
Enter the Microsoft update ID (e.g., KB5063878) in the value field.
Click Save and Publish to apply the changes.

Reference: How to exclude specific software updates from Software Updater in WithSecure Elements Endpoint Protection? - WithSecure Community

What happens next?

When a managed device checks for missing updates, it will skip any updates that match your exclusion (such as KB5063878).
The device will report that the update wasn’t installed due to administrator exclusion.
The excluded update may still appear in the Software Updates tab in the console until devices report back their installation status.

This ensures that the specified update will not be automatically installed on devices linked to that profile.

Hope this helps make managing your updates a bit easier!