Method for blocking the installation of a patch

A method, apparatus and computer instructions are provided for blocking the installation of a patch. A patch management system is used to recognize files with a selected indicator. A selected indicator may be an identifier distinguishing the file such as size, checksum, name, or a current timestamp. The files with a selected indicator contain signatures that may be cross referenced with patch metadata. The signature of the patch file is validated against policies that indicate the patch has been approved for installation. If the patch is approved the files are installed. In response to a patch being unapproved for installation a locking mechanism locks files targeted by patches based on patch metadata, patch content, and/or patch instructions so that the patch may not be installed.