(imported topic written by curth)
The “lock” feature allows customers to keep a system from receiving any/all Fixlet/Task deployments. Requesting that BigFix implement a way for customers to selectively block specific Fixlets/Tasks for targeted systems. An example, Windows 2003 SP2 should not be installed on a specific set of servers because the business applications installed on those servers are incompatible with SP2. I want to be able to block just SP2 from being installed on these systems, not all patches.
One way to implement this would be for BigFix to create a feature to set a fixlet specific setting on systems. Then BigFix could implement an additional relevance check to examine the value of the setting, if it existed.
Another way to implement would be to create a list of “blocked” fixlets on the target system. Initially the list would be empty, but would exist on all BigFix managed systems. Then, the relevance checks for any particular Fixlet or Task would check for the existence of the Fixlet/Task number in that list. If the Fixlet/Task number is in the list, then the Fixlet/Task would not show as relevant.
Either method should allow for an easy way to determine what Fixlets are blocked on which systems.