I have a question about how the new MS patching requirements will show up in the vProtect console and how they individual patches can be deployed/rolled back. I get that MS are now providing one bundled update but when deploying through vProtect is this an all or nothing approach? ie if there are 5 fixes in the bundle will all 5 have to be deployed?
For machines on Windows 7/Server 2008 R2 and above, this is essentially all or nothing. The rollups can't be "broken up", and if a portion of the update fails to install, the update is supposed to roll back those changes and then exit.
This document explains the changes and how they'll impact patching via Protect.