After accepting a kernel update on machines here in the shop, two of them will not boot, so I would like to NOT update remote machines where we do not have console access.

Can't find anything on point, .. so how does one REFUSE the kernel update proposed by zypper up [while accepting the rest]?