To exclude the installation of patches on a device, create an ExcludedPatches key in the HKEY_LOCAL_MACHINE\SOFTWARE\Novell\ZCM\ location. After creating the ExcludedPatches key, create a key inside the ExcludedPatches key with the ID of the patch for which you want to block the installation as shown in the following image:
Create this registry key on the device in which you want to block the patch installation. Similarly, you can add more keys with patch IDs inside the ExcludedPatches key.