Software uninstall or rollback via Group Policy

[rooky]

Don´t know if i can place my question in this section but i have a question about Windows update.
By accident a hotfix for I.E. is installed on all clients within our new 2003 AD network giving the clients a lot of troubles sinds it was supposed to be a specific server update not a client update.
this occured via a Windows update GPO.
This Hotfix needs to be uninstalled on all the clients where it was put on but can this be done with Group Policy or is it possible to update a specific ADM template so that i can automatically uninstall all the clients with that GPO?

Their are VBS scripts to uninstall software but i am just would like to know if it can be done bij Group Policy

There are not hotfixes which can be deployed by GPO.

This is because in order to deploy software via GPOs,
they need to be MSI packages.. and, well, NO hotfixes
ship as MSIs.

So, the patch *DID NOT* get delivered by GPO.

Hence, in order to remove it, you need to find
the method of installation.. perhaps SUS or SMS?

In that case, you might be able to revoke it..

but, in any case, GP is not going to help you here
unless you run a logon script which pulls it out.

[rooky]

Hi Jeremy

I Just ordererd the book so i stille need to learn a lot about the new style of group Policy especially when you're used to NT 4.0 System Policies

When i said patches installed via GPO's i really meant via SUS but the Windows Update Schedule GPO did the work for the clients by telling them when to schedule and from what SUS server the patch was "pushed"
The problem was that their where so many clients that i would like to uninstall the patch by group policy and since i saw GPSI possibilities i thought he!, it could be a way to revoke the patch but it is not a possibility.
But are their ADM templates to use for such errors or can you revoke software only by using the SUS server interface in the above case?

(again forgive my bad English ops: )

...about the bad english. It's better than most of my friends ! :-)

Anyway.. yeah... the idea is that hopefully you can revoke it with SUS.. but maybe even then you cannot.

And, if you cannot revoke via SUS, you can use GPOs to create a script to uninstall it.

I think that's about it...

Good luck !