You have client Windows 8.1 Enterprise computers.
Your company purchases a subscription to Windows Intune.
You deploy the Windows Intune agent to all of the computers.
You need to uninstall a Microsoft update that was installed before the Windows Intune agent
was installed. The solution must minimize administrative effort.
What should you do?
A.
Create a Group Policy object (GPO) that runs wusa.exe by using a startup script.
B.
From Windows Intune, create a new automatic approval rule.
C.
From Windows Intune, click New updates to approve.
D.
Create a Group Policy object (GPO) that runs msiexec.exe by using a startup script.
Why doing this from Intune?
The agent is not even installed yet
You need to uninstall a Microsoft update that was installed before the Windows Intune agent was installed.
I would think that leaves answer A (wusa) or D (msiexec /x)
I think it safe to asssume that when it states:
“You deploy the Windows Intune agent to all of the computers.”
That the deployment was successful.
Im struggling to find anything in the Intune admin console to uninstall an update, and according to the link below it isn’t possible without deploying a script.
https://social.technet.microsoft.com/Forums/en-US/9e9f4fa2-8bb8-4b05-8a9a-c65f2e5c2c50/how-to-remove-a-update-through-intune?forum=microsoftintuneprod
I would go with WSUS as described in the link below.
https://community.spiceworks.com/topic/150076-how-to-remove-a-recently-installed-microsoft-update-from-domain-pc-s
If you add a windows computer to Intune, it will open up the updates category in the left hand menu. If you pick on any update that is not mandatory, you can select approve. When you walk through the deployment process, one of the approval options is to uninstall.
Based off what I have seen, I think “C” is correct.