Security Updates via SCCM without Spectre and Meltdown updates

Topic

New Reply

Please excuse me if I have posted this is the wrong queue as I am a new user. I use SCCM to deploy security updates and have been instructed by management not to deploy any of the Spectre/Meltdown patches. We are several months behind and I need to deploy the rest of the updates except the Spectre/Meltdown patches. Does anyone have a list of those patches to exclude in the “Software Update Groups” to avoid the deploying any Spectre/Meltdown updates? Any help would be greatly appreciated.

Reply | Quote

Replies

Please see these two links and feel free to ask if they don’t answer your questions:

https://support.microsoft.com/en-us/help/4073119/protect-against-speculative-execution-side-channel-vulnerabilities-in

https://support.microsoft.com/en-us/help/4072698/windows-server-guidance-to-protect-against-the-speculative-execution

You may wish to turn off the Spectre/Meltdown mitigations, as detailed in the above links. You shouldn’t try to avoid the updates with the Spectre/Meltdown mitigations though.

Reply | Quote

I’d be asking why management don’t want their machines protected?

cheers, Paul

Reply | Quote