Some of our customers need a fixed patchrelease für more than one month, because of restricted testing scenarios. When they began to test an application, during the whole release phase of the application, it is necessary not to touch the OS level. Yes, this sounds strange and i do not want to discuss this here. I want to discuss the possibility to hold a Software Update Group content fix and robust against a WSUS or SUP sync. Which means do not touch expired or superseeded or any update in this SUG. ATM this is not possible in SCCM CB. The alternative is to repackage OS Patches in applications or packages. But this is not what we want. Also an alternative is, not to sync WSUS or the SUP, but we have a mixed scenario and we have to patch the rest of our customers. to bring it to the point: From a software release point of view, give us the possibility to have fixed patch software bundles.

So give us a configurable SUG which is robust against WSUS sync etc.