A Step-by-Step Guide to Uninstall Intune-Managed Windows Updates

In this blog post, we’ll delve into common reasons behind the issue of being “unable to uninstall Windows update manage by Intune” and provide step-by-step solutions to help you resolve it effectively.

Here is a quick step guide to uninstall Windows update mange by Intune:  

Intune Console:

  • Rollback Feature Updates: Roll back to a previous version if the update is recent.
  • Pause Updates: Temporarily pause updates to stop new installations.

PowerShell Scripts:

  • Custom Scripts: Advanced users can use PowerShell to target specific updates for removal, but this requires careful setup and carries risks.

Continue reading the full blog, as this is just an overview of the steps. Further in the blog, we have mentioned more effective methods with detailed step-by-step instructions to fix the issue of being unable to uninstall Windows update manage by Intune.  

How to Identify Intune-Managed Windows Updates You Can’t Uninstall ?

Identifying Intune-managed Windows updates that you can’t uninstall can be crucial for troubleshooting and maintaining system performance. Here’s a detailed guide on how to do this:

Check Update History

Begin by reviewing the update history on your Windows device:

  • Open Settings: Firstly, go to the Start menu and select Settings (the gear icon).
  • Navigate to Update & Security: Secondly, click on Update & Security.
  • View Update History: Then, select View update history. This will show you a list of installed updates, including feature updates, quality updates, and driver updates.

Identify Intune-Managed Updates

Intune-managed updates may have specific identifiers or notes indicating they were deployed via Intune. Specifically, look for:

  • Deployment Information: For instance, updates installed through Intune may have a deployment ID or a note indicating they were pushed by your organization.
  • Update Type: Additionally, feature updates and quality updates managed by Intune may be labeled differently than standard Windows updates.

Use the Intune Admin Center

If you have access to the Intune Admin Center, you can gather more information about the updates:

  • Log in to Intune Admin Center: First, go to the Microsoft Endpoint Manager admin center.
  • Navigate to Devices: subsequently, click on Devices and select the relevant device group.
  • Check Update Policies: Finally, review the update policies assigned to the devices. This will help you identify which updates were deployed and their status.

Utilize PowerShell

For advanced users, PowerShell can be a powerful tool to identify updates:

  • Open PowerShell: to begin, search for PowerShell in the Start menu and run it as an administrator.
  • List Installed Updates: Next, use the following command to list installed updates:  Get-WindowsUpdateLog
  • Filter for Intune Updates: Lastly, you can filter the results to find updates that were installed via Intune by looking for specific deployment IDs or names.

Check for Known Issues

  • Moreover, sometimes, certain updates may have known issues that prevent uninstallation. Therefore, check the Microsoft support website or forums for any announcements regarding problematic updates.

Contact IT Support

  • If you are in a corporate environment and still cannot identify the updates, reach out to your IT support team. They can provide insights into the updates deployed via Intune and assist with any uninstallation issues.

By following these steps and combining information from different sources, you should be able to identify the Intune-managed Windows update that is causing the problem of being unable to uninstall Windows updates managed by Intune and take the appropriate steps to resolve it.  

Also Check: How to fix CrowdStrike blue screen issue ?

How to uninstall Windows update manage by Intune ?

Uninstalling Windows updates managed by Intune can be challenging, as these updates are often enforced by your organization’s IT policies.

However, there are several methods you can try to uninstall these updates. Below are detailed steps for each method:

Method 1: Use the Intune Admin Center (For IT Administrators)

If you have administrative access to the Intune Admin Center, you can manage updates directly:

Log in to the Intune Admin Center:

  • Secondly, sign in with your admin credentials.

Navigate to Devices:

  • Next, click on Devices in the left-hand menu.
  • After that, select the relevant device group or individual device.

Check Update Policies:

  • Subsequently, click on Update policies to see the policies applied to the devices.
  • Then, identify the specific update you want to uninstall.

Remove or Modify the Update Policy:

  • If applicable, you can remove or modify the update policy that deployed the update.
  • As a result, this may allow users to uninstall the update on their devices.

Method 2: Use Windows Settings

Alternatively, if you are a user and have the necessary permissions, you can try to uninstall updates through Windows Settings:

Open Settings:

  • To begin, click on the Start menu and select Settings (the gear icon).

Navigate to Update & Security:

  • Next, click on Update & Security.

View Update History:

  • Then, select View update history to see a list of installed updates.

Uninstall Updates:

  • Following this, click on Uninstall updates at the top of the page.
  • Consequently, this will open the Control Panel with a list of installed updates.

Select the Update:

  • Now, find the update you want to uninstall, select it, and click Uninstall.
  • Finally, follow the prompts to complete the uninstallation.

Also Check: How do you pause Config Refresh on a Windows device in Intune ?

Method 3: Use PowerShell

For advanced users, PowerShell can be a powerful tool to uninstall updates:

Open PowerShell:

  • First, search for PowerShell in the Start menu, right-click it, and select Run as administrator.

List Installed Updates:

  • Next, use the following command to list installed updates: Get-WindowsUpdateLog

Find the Update to Uninstall:

  • Then, identify the update you want to uninstall from the list.

Uninstall the Update:

  • After that, use the following command to uninstall the update (replace KBxxxxxxx with the actual KB number): wusa /uninstall /kb:xxxxxxx
  • Lastly, follow the prompts to complete the uninstallation.

Method 4: Use Command Prompt

You can also use the Command Prompt to uninstall updates:

Open Command Prompt:

  • To start, search for Command Prompt in the Start menu, right-click it, and select Run as administrator.

Uninstall the Update:

  • Then, use the following command (replace KBxxxxxxx with the actual KB number): wusa /uninstall /kb:xxxxxxx
  • Finally, press Enter and follow the prompts to complete the uninstallation.

Method 5: Contact IT Support

  • As a last resort, if you are unable to uninstall the update using the above methods, or if the update is enforced by your organization, it’s best to contact your IT support team. They can provide assistance and may have the necessary permissions to remove the update.   

Also Check: How to deploy CrowdStrike using Intune for endpoint security management ?

Conclusion

In conclusion, uninstalling Intune-managed Windows Updates can be difficult, especially if you are unable to uninstall Windows update manage by Intune, but it’s not impossible.

Throughout this guide, we’ve explored several methods, from using the Intune Admin Center for IT administrators to using Windows Settings, PowerShell, and Command Prompt for users.

First and foremost, remember to always identify the update carefully before trying to uninstall it. If you are unsure or encounter any problems, please do not hesitate to contact your IT support team.

They have the expertise and permissions to help you manage these updates safely. By following the steps in this guide, you can troubleshoot and resolve issues related to Intune-managed Windows updates, ensuring your system remains stable and secure while complying with your organization’s IT policies.

Source: [ microsoft, windowsmanagementexperts, reddit, anoopcnair ]

Frequently Asked Question’s (FAQ’s)

How do I remove Windows Update from Intune ?

To remove a Windows Update from Intune, log in to the Intune Admin Center, navigate to the relevant device or update policy, and identify the update to remove. Modify or delete the associated update policy to prevent the update from being applied to targeted devices.

How do you uninstall Windows 10 update that Cannot be uninstalled?

To uninstall a Windows 10 update that can’t be removed normally, use Command Prompt or PowerShell to force the uninstallation. If that doesn’t work, try rolling back to a system restore point or using the Windows Recovery Environment to reset the system. If issues continue, consult your IT support for help.

How do I remove a Windows 10 update that keeps failing ?

Check for compatibility issues, run the Windows Update Troubleshooter, manually download and install, temporarily disable antivirus, perform a clean boot, contact Microsoft support.


Content Writer

Smith Ron, the writer at Assistme360. He has extensive experience in crafting straightforward, step-by-step guides for technical issues. His broad knowledge ensures accurate solutions. Kindly spare a moment to drop a comment down and express your opinions. Your feedback can be valuable in assisting others who may come across similar problems.


Leave a Comment