Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

We have a massive problem with .net updates in our machines (in winxp), caused by kaspersky antivirus. If karspersky is running, .net updates fails to install and breaks something, and some programs stop working.

To stop the propagation of the problem, when we detect a new update that broke a computer, we decline that new update in wsus, but a certain number of pc already tried to install it, and if user didn't complain, it never get repaired.

So, we want to decline ALL .net updates by default in WSUS, leaving all other updates approved by default. Can be it done?

share|improve this question
Why not fix Kapersky? You're trying to fix a symptom of the problem instead of fixing the cause of the problem. – joeqwerty Oct 11 '13 at 17:34
Because we are reclaiming this bug to kaspersky since June. We're just tired. – ekms Oct 14 '13 at 6:04

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Browse other questions tagged or ask your own question.