Quick question. How do I rollback n particular patch on multiple machines at once? I have already denied it in the patch approval policy.
There isn't any easy way in Patch Management as you need to do it per machine. I've done it before using a good old script to run the SPUNINST executable for the patch, but that won't work for every single patch and not on 2k8 IIRC. If it does, it's easy to run across multiple devices though.
You can also try grabbing the MSI GUID from Audit > Add/Remove for the patch, if it shows there. Using that, you can utilise the 'Uninstall by GUID' step in scripting to remove it pretty easily.