If you are trying to use PowerShell to delete an update from WSUS but are receiving an error similar to:
Exception calling “DeleteUpdate” with “1” argument(s): “spDeleteRevision: cannot delete revisionid: 502004 because it is still deployed to a Non DSS Target Group
you need to set the update to NOT APPROVED by at the parent ALL COMPUTERS level and select APPLY TO CHILDREN. Even though all of the children were already set to N/A NOT APPROVED that setting was not inherited from the parent and that is apparently required if you want to remove the update via PowerShell.
If you still have issues, in the WSUS console find all of the computers that have the upgrade installed and remove them from WSUS. Then run the SERVER CLEAN UP WIZARD and run the script again. The PC’s you just removed will rejoin WSUS the next time they try to sync up (likely 3am).
You may find THIS Microsoft article and THIS Partner post useful if you are still having problems.
1 Comment
Mike Hansen · September 1, 2018 at 1:02 am
This is all very well, but how does one identify the update that’s causing the problem? The revision number is not the KB number so WSUS cannot find the update using this number.