Select updates to install or ignore
Allow InTune admins to select specific KBs to Deploy or Ignore (Automated or manual) much like the Show/Hide updates troubleshooter
Context for this is I have several MDM devices managed exclusively with InTune, and using the Intune Software Update Ring settings, I set them to Semi-Annual -- however a troublesome KB came into the mix (KB4517389) which produced an enormous headache for our IT team.
The KB would keep installing until we manually set a registry key to disable auto update and to allow us time to deploy the Show/Hide update troubleshooter to affected machines, and hide the troublesome KB.
This should be centrally managed -- if there is a KB I do not wish to deploy, I should have the ability to manage that via InTune's Software Update control