Excluding Workstations from Patches

(imported topic written by SystemAdmin)

I would much prefer not excluding anyone, but I’m going to have to exclude a few workstations from receiving patches via Bigfix. However, I’d still like to have the agent installed. At the very least, I’d like to be able to continue to monitor the workstations so I know what patches are missing. However, when patches are applied to all machines, these few machines must not receive any of the patches.

Is this easy enough to do? Any recommendations on the best way to accomplish this?

Thanks,

TMR

(imported comment written by SystemAdmin)

I think you would want to set these machines to a Locked Status. If you select a machine(s) and right click > Edit Computer Settings there is a checkbox for Locked. Once a machine is locked it will report in and still update the machine settings and stuff but any actions that attempt to run on those machines will show a status of Locked.