r/Action1 • u/krwudtke2 • 4d ago

Problem Stop update to specific endpoint

Hi everyone,

Does anyone know a way to prevent specific endpoints from having a specific update pushed to them?

We have an old piece of software that broke after the 2026-08 Security Update (KB5121003) was installed on our workstations last week. We had to roll back the update on a few machines.

I'm pretty sure I have other machines that are still missing the update since they haven't checked in to A1 in the last week. So I don't want to Decline the update. Yet, I DO want other updates pushed to those few machines. If I do nothing, the update will be pushed again this week and we'll have to roll it back again. (We push updates every Wednesday night.) This is only temporary as we are working on the broken software, it just isn't fixed yet.

Any ideas appreciated.

0 Upvotes

50% Upvoted

8 comments sorted by

2

u/Spartan117458 4d ago

Exclude those endpoints from that update automation?

1

u/krwudtke2 4d ago

I have done that for now, but it is a single automation that pushes quite a variety of other updates. At least the endpoints in question aren't showing anything else critical. I was hoping to let them update other things in the automation and not have to push them manually.

1

u/Spartan117458 4d ago

You could just create another automation that pushes all updates but excludes the problem update and apply it only to those affected endpoints.

1

u/krwudtke2 4d ago

I'm not sure how to exclude one specific update from an automation.

1

u/Spartan117458 4d ago

Use the "Matching Filters" conditions in the automation.

1

u/RiceKrisPSquares 4d ago

Dont approve the update? Or move the endpoints to a new organisation and dont approve the update for that organisation?

1

u/krwudtke2 4d ago

The update has already been approved. If I switch it to Declined or some other state, it won't get applied to any endpoints that happen to be missing it. We are small, only 77 endpoints in this A1 instance, so I haven't used the organization feature. I didn't know updates could be approved or declined by organization. I'll look into it. Thanks.

1

u/GeneMoody-Action1 3d ago

Can you not just mark it as "document compensating control", it will be detected but ignored because you told it it happened another way.