Thursday, December 17, 2015

How to remove Windows and Office updates with ConfigMgr

I'm using ConfigMgr for patch management a lot, however sometimes there are updates that needs to be removed as well. Within ConfigMgr you can use 'Edit membership' to remove already deployed updates from existing Software Update Groups, but what to do when updates are installed on systems already? Interesting question and there is a solution for this as well.

When Windows updates are deployed already, do the following:
-Create a new custom task sequence
-Add a Run command line step in it
-Use the command: C:\Windows\System32\wusa.exe /uninstall /kb:<kb number>/quiet /norestart in it
-Deploy the task sequence to your systems

When Office updates are deployed however, the proces will be a little different:
-Create a new custom task sequence
-Add a Run command line step in it

-But now it comes:

Start regedit and do a search on the kb number. This can be found in HKLM\ Software\ Microsoft\ Windows\ CurrentVersion\ Uninstall\ for x86 systems and HKLM\ Software\ WOW6432Node\ Microsoft\ Windows\ CurrentVersion\ Uninstall\  for x64 systems.

Have a look for the Uninstallstring there, which is like: "C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{GUID1}" "{GUID2}" "1033" "0"

-Use both GUIDs and use them in the following command line: msiexec /package {GUID1} MSIPATCHREMOVE={GUID2} /qb /norestart
-Deploy the task sequence to your systems

After that the Windows and/or Office update will be removed succesfully!

Source: Teh Wei King


  1. Hey man, I know this is 2+ years old, but thanks for that! I was ripping my hair out wondering why WUSA was returning that the KB was not installed for an office KB. Thanks a million!

  2. Hi,
    Just missing the command line for the Dot net!
    For example :

    ndpABspC-kbwwxxyyzz-x86.exe" /uninstall /q /norestart