How to Rollback or Remove installed update from client through WSUS

Uninstall Microsoft patch using WSUS

WSUS server provides the facility to uninstall an unwanted installed patch. If an update is already installed and support removal then you can configure it to remove from client with a specific time or deadline.  After configuring to uninstall an unwanted patch, client will initiate the process whenever it contact to WSUS server.

Note:

Not all updates support removal. You can see whether an update supports removal by selecting an individual update and looking at the Details pane. Under Additional Details, you will see the Removable category. If the update cannot be removed through WSUS, in many cases it can be removed with Add or Remove Programs from Control Panel.

To approve updates for removal

1. Open the WSUS administrative console window, click Updates.
2. From the list of updates, select the updates, you want to approve for removal and right click them (or go to the Actions pane).
3. From the Approve Updates dialog window, select the computer group from which you want to remove the update, and click the arrow next to it.
4. Select Approved for Removal, and then click the Remove button.
5. After the remove approval has completed, you can select a deadline by right-clicking the update once more, selecting the appropriate computer group, and clicking the arrow next to it. Then select Deadline.
6. You may select one of the standard deadlines (one week, two weeks, one month), or you may click Custom to select a specific date and time.
7. If you want an update to be removed as soon as the client computers contact the server, click Custom, and set a date in the past.

OR

If you are wondering how to remove an update from computers using WSUS then follow the below step by step.

1. Open the WSUS MMC console and connect to your server
2. Expand Update Services => Server Name => Updates
3. Right-click All Updates and select Search                                                                                                                                              
4. Enter the kb number of the update you would like to remove and press Find Now                                                         
5. Right-click the update and select Approve, Status Report is also useful to see how many computers still have the update installed                                                                                                                                                                                 
6. Right-click either a specific computer group or All Computers and select Approved for Removal and then press OK