While installing patches has become easier with the latest versions of SCCM, trying to uninstall them still requires a little bit more work.

Let’s take for example the latest critical security patch from Microsoft, KB2964358

As you are requested to install the patch as soon as possible one thing that you will probably also need is a way to uninstall the patch in case things go wrong…

If you check the documentation, running Wusa.exe /uninstall /kb:2964358 /quiet (/norestart) should do the trick.

This is confirmed by a quick test via the command line. However when you try to run the command through Sccm, you get a Catastrophic Failure error

This is due to SCCM 64/32 redirection. Wusa should be run via the Sysnative alias path or via a Task Sequence command line where the Disable 64 bit Redirection checkbox is Checked

The following command works fine*

%windir%\SysNative\wusa.exe /uninstall /kb:2964358 /quiet /norestart

Note that even though the Sccm 2012 client is 64bits, this still applies.