How to exclude upgrading clients for Windows computers in System Center Configuration Manager

Applies to: System Center Configuration Manager (Current Branch)

You can exclude a collection of clients from automatically installing updated client versions. This applies to automatic upgrade as well as other methods such as software update-based upgrade, logon scripts, and group policy. You can use this for a collection of computers that need greater care when upgrading the client. A client that is in an excluded collection ignores requests to install updated client software.


Excluded clients still download and run CCMSETUP, but won't upgrade.

Configure exclusion for automatic upgrades

  1. In the Configuration Manager console, go to Administration > Site Configuration > Sites, and then click Hierarchy Settings.

  2. Click the Client Upgrade tab.

  3. Click the checkbox for Exclude specified clients from upgrade, and then for Exclusion collection, select the collection you want to exclude. You can only select a single collection for exclusion.

  4. Click OK to close and save the configuration. Then, after clients update policy, clients in the excluded collection will no longer automatically install updates to the client software. For more information, see How to upgrade clients for Windows computers.

Settings for automatic upgrade exclusion


Although the user interface states that clients will not be upgraded via any method, there are two methods you can use to override these settings. Client push installation and a manual client installation can be used to override this configuration. For more details, see the following section.

How to upgrade a client that is in an excluded collection

So long as a collection is configured to be excluded, members of that collection can only have their client software upgraded by one of two methods, which override the exclusion:

  • Client Push Installation – You can use client push installation to upgrade a client that is in an excluded collection. This is allowed as it is considered to be the intent of the administrator and enables you to upgrade clients without removing the entire collection from exclusion.

  • Manual client installation – You can manually upgrade clients that are in an excluded collection when you use the following command line switch with ccmsetup: /ignoreskipupgrade

    If you attempt to manually upgrade a client that is a member of the excluded collection and do not use this switch, the client will not install the new client software. For more information see How to install Configuration Manager Clients Manually.

For more information on client installation methods, see How to deploy clients to Windows computers in System Center Configuration Manager.