Trying to Rollback Patch KB4532693 but not displaying applicable computer

1

Trying to Rollback Patch KB4532693 but not analyzing any applicable computers, but in a web report it shows approx 350 computers remediated with the same KB Patch, anyone can suggest…

2

We’ll need a lot more detail than that. What relevance have you tried? Did you use a rollback wizard to create a rollback fixlet? If so post the relevance that it generated, please.

3

Yes sir using rollback wizard…and tested another patch it’s displaying applicable computers…my query is if on webreport i can see this as this patch remediated on 13th feb on approx 350 windows 10 systems…which is the release date of that patch…only 3% patches are pending to deploy… but by creating rollback wizard its howing patch is not relevant for any systems…

4

For Windows 10 cumulative updates, the rollback wizard tries to correlate the KB number with the package name that needs to be passed to the dism command which performs the uninstall.

Note the Rollback Wizard is very generic in how it functions and tries to accommodate the most common uninstalls but will not be able to do everything.

It’s likely the latest updates (or maybe just updates on Windows 10 version 1903 and later), including the one mentioned here (KB4532693), no longer place entries in the registry that the rollback wizard expects. And so the fixlet generated won’t work.

The team is already looking into this.

Until the wizard is updated, you’ll need to craft your own custom fixlet from scratch or modify the one generated by the rollback wizard.

Considering KB4532693 is a Win 10 cumulative update, you can probably use relevance from the corresponding patch fixlets and make the appropriate adjustments.
The key relevance you’d probably want to change is the UBR version check. You’d want to change it to this:

(it as integer = 657) of value "UBR" of key "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion" of native registry

As for the action, I believe the following would work.

Action:

if {x64 of operating system}
waithidden "{pathname of system folder}\dism.exe" /Online /Remove-Package /PackageName:Package_for_RollupFix~31bf3856ad364e35~amd64~~18362.657.1.7 /quiet /norestart
else
waithidden "{pathname of system folder}\dism.exe" /Online /Remove-Package /PackageName:Package_for_RollupFix~31bf3856ad364e35~x86~~18362.657.1.7 /quiet /norestart
endif

The above is for Win 10 1903. Replace 18362 with 18363 in the package name if you’re trying to do this for Win 10 1909.

5

Thanks for the update sir…will check…