How to Remove Updates

Some updates can cause application compatibility problems. Although this is rare, if you suspect that an update has caused a problem, you can remove the update to alleviate the problem. Then you should work with Microsoft and any other software vendors to resolve the problem so that you can install the update.

Security Alert Before you remove an update, view the update's Knowledge Base article to determine whether you can use a different countermeasure to remove the vulnerability that the update resolves. For example, you might be able to reduce the vulnerability by properly configuring your firewall. This will reduce the risk of being compromised while you work to resolve the problem with an update.

You can remove an update in two different ways:

• WSUS You can remove some updates with WSUS, but many updates do not support being removed. To remove an update for a group of computers or all computers with WSUS, follow these steps:
  1. View the WSUS Updates page.
  2. Select the update and then click Change Approval under Update Tasks.
  3. Click the Approval list and then click Remove.
  4. Click OK.
• Add/Remove Programs Uninstall an update from a client computer manually by following these steps:
  1. Open Control Panel.
  2. Click Uninstall A Program under Programs.
  3. Click View Installed Updates under Tasks.
  4. Click an update and then click Uninstall.

Note that removing an update from a single computer in a networked environment can temporarily alleviate problems caused by the update. However, depending on the distribution mechanism used to install the update, it might reinstall automatically. Additionally, when you intentionally remove an update, you should inform the personnel responsible for auditing software updates that the missing update is intentional and that you have taken other measures to protect against the security vulnerability (if applicable).