Hi.

Has anyone any experience with moving a WSUS Server (Installed on a Windows 2008R2 member Server) into a new domain ? The server name is not going to change.

Thanks

Jason

Every now and then, I set up a test group (or several of them), approve updates and then delete the groups as needed.  I've been trying to figure out a way to script the cleanup.  There's anissue with deleting a group which has approvals and my current work around is to use the GUI and create a filter to seek out all the updates and reset their approval to "Not Approved."  Once that's done, I can delete the test computers and their group.

Obviously, the work around is a bit cumbersome and that's why I would like to have a script that I can fire off, answer a quick question or two and then walk away for the evening while it does its job.

Here's what I have thus far:

$WSUSSrvr = "H1P-WSUS1.MYDOMAIN.LOCAL"

# Connect to the WSUS Server.
[reflection.assembly]::LoadWithPartialName("Microsoft.UpdateServices.Administration") | Out-Null
$WSUS = [Microsoft.UpdateServices.Administration.AdminProxy]::getUpdateServer($WSUSSrvr,$False,8530)

# List groups.
$WSUS.GetComputerTargetGroups() | Sort-Object -Property "Name" | Format-Table "Name" -AutoSize

# Prompts you for a group you wish to delete.
$WSUSGrp = Read-Host -Prompt "Enter a valid group name from the list above."

###  Need to find out how to reset approvals here.  ###

$DeleteGrp = $WSUS.GetComputerTargetGroups() | Where { $_.Name -eq $WSUSGrp }

$DeleteGrp.Delete()

All of that code works, as near as I can tell, but I still have to reset approvals by hand because I cannot figure out how to go about doing it in code.

Our WSUS server is continually not able to download updates.

It shows updates sitting ready to be downloaded.

When I check the Options - Update Source and Proxy Server - Proxy Server

The "Use a proxy server when synchronizing" is unticked.

I tick the option, updates download.

I see the Change.log shows the following

2015-07-20 21:40:56.335 UTC WSUS configuration has been changed

I then tick the box

2015-07-20 22:01:43.970 UTC WSUS configuration has been changed
2015-07-20 22:01:43.988 UTC Proxy Password has been changed

then it unticks itself again

2015-07-21 00:11:50.062 UTC WSUS configuration has been changed

I am planning having 2 WSUS Servers but one in the DMZ to patch DMZ servers (Downstream-Replica) and the other in Internal network (Upstream)

I would like to use Replica mode option.Here are my questions

1. Can i patch all the DMZ servers in the DMZ using the downstream replica server or this is control from the Primary (upstream server)

2. Can i approve updates only in the Primary (upstream server) or either from the replica downstream server?

3. Confirm the following ports  8530 and 8531 is sufficent between upstream and downstream and all internal and dmz clients to the downstream servers. 

Thanks

Hi,

I have got a weird problem. It deletes a shared executable file when it installs the windows updates.

I am very confused on this behaviour. I have checked Antivirus and it has got exclusion.

Is there a way to stop this issue?

Thanks, 

I am setting up a WSUS server on our domain, running Server 2012.  My WSUS Console is VERY slow.  Not unusably slow, but slow enough to require a bit of patience! ;-)

Anyway, I don't mind the slowness of the WSUS because I just wait for it to process whatever it is trying to do, but what DOES irritate me is an error message that appears every few minutes saying "The MMC Snap in is not responding" or something like that.  I'm guessing what is happening is that the WSUS console has taken longer to respond than usual, so the system assumes that it has stopped responding.  Any way to disable this error?  It is starting to annoy me.

Hi guys,

I know that there were a lot of discussions about this topic, I've checked a lot but so far as I know there is no clear solution of the problem only kind of workaround using the option "<span gpmc_settingdescription="Specifies that to complete a scheduled installation, Automatic Updates will wait for the computer to be restarted by any user who is logged on, instead of causing the computer to restart automatically.

If the status is set to Enabled, Automatic Updates will not restart a computer automatically during a scheduled installation if a user is logged in to the computer. Instead, Automatic Updates will notify the user to restart the computer.

Be aware that the computer needs to be restarted for the updates to take effect.

If the status is set to Disabled or Not Configured, Automatic Updates will notify the user that the computer will automatically restart in 5 minutes to complete the installation.

Note: This policy applies only when Automatic Updates is configured to perform scheduled installations of updates. If the "Configure Automatic Updates" policy is disabled, this policy has no effect." gpmc_settingname="No auto-restart with logged on users for scheduled automatic updates installations" gpmc_settingpath="Computer Configuration/Administrative Templates/Windows Components/Windows Update" gpmc_supported="Windows XP Professional Service Pack 1 or At least Windows 2000 Service Pack 3" tabindex="0">No auto-restart with logged on users for scheduled automatic updates installations" but we have more than 80 servers and during the work process we can't keep eye if someone is logged or not. Also manually installing the updates can't be used because of the number. I know that installing updates is very important and we do update our servers, it's just that we want the reboot to occur in a way we want. For example: the updates are installing on Saturday morning at 1 a.m. (to avoid working hours) and the scheduled reboot script run at 4 a.m. The reboot script includes some additional tasks - like stopping the services and processes. Also we don't restart the servers all together. There is 2-5 min time delay between some of them. So, if someone has new idea or find a working workaround I'll be happy to see it.

Hi ,

MS15-078 Out-of-band update is not downloading using WSUS , please guide on this .

Trust your work , do not trust your company. Love your work , do not love company.

hi every body

when create new ou

all user in this ou appear temporary profile

can you help me

Hi all,

I've been looking on the interwebs for 30-40 minutes trying to find out what the fields are in the reportingevents.log and the definition of the related codes (like 101, 147, 189, etc). I cannot find this anywhere.

This is related to Windows Update. The file is located in C:\Windows\SoftwareDistribution and this is a Win 2008 server (though it should be the same for an fairly recent WinOS).

Thanks!

2013 installation on my computers is custom, ex: excludes OneDrive for Business.

When I check for updates needed by computers. All my computers shows needing to update OneDrive, but it isn't installed.

Should the update be deployed even if the component is not installed??

Hi

We have been running a WSUS server on our network for several years with no issue.  Recently we found that about 70 of the 2500 machines we manage were not receiving any updates.  All of our managed machines are configured to use out WSUS server using the same Group Policy.  I checked the WSUS log and the problem machines are successfully connecting to the WSUS server but they report that no updates are required.  If I disable the GPO or manually point them to Microsoft Update, they immediately detect 50 to 60 pending updates.  If I point them back to the local WSUS server, they again claim there are no updates available.  I've even gone so far as to install a new WSUS server and the symptom remains the same when I point affected machines to it.

Here's a typical log entry.

2012-04-0302:58:24:8738980af8Misc===========  Logging initialized (build: 7.4.7600.226, tz: -0600)  ===========
2012-04-0302:58:24:8738980af8Misc = Process: c:\program files\windows defender\MpCmdRun.exe

There is a note on https://support.microsoft.com/en-us/kb/3020369 under the Known issues which says:

• Note In managed environments, such as by using Windows Server Update Services (WSUS), you can avoid either of these issuesby deploying this update as a stand-alone update.

I suppose that means that I should release only this update without the others.

But what about newly installed computers in the future ?

Won't they install all updates together ?

Or is there some way to define update as stand-alone which I'm not familiar with ?

thanks

Testing Windows 8.1 Pro on a few of our computers here. At first, the client computers were not showing up in the WSUS Console... even after a couple days and many Console refreshes. After reading a few TechNet forums on the matter, I ran, (on the client machines - in an elevated command prompt) wuauclt /detectnow  which resulted in the computer name showing up in the Console. It shows (in the Console) Windows 6.3 as the Operating System and in Last Status Report it shows Not Yet Reported. On the Client, going into Windows Update, shows "Your set to automatically install updates - No Updates are available". Pressing "Check for Updates" results in "Windows could not search for new updates - error code: 800B0001" When checking online for Windows Updates, I can see/get updates from Windows Updates. Any ideas on how to get the Windows 8.1 clients to get their updates from WSUS? Here are the specs of both ends:

Server Side -

Windows Server 2008 R@ Enterprise SP1 64 bit

WSUS Update Service ver. 3.2.7600.226

Management Console 3.0 version 6.1 build 7600:SP1

Client Side - 

Windows 8.1 Pro 64 bit

Core i5-4210U w/8GB mem

Harlen

Hello Team,

I have WSUS server running on windows 2003. it is having SQL express edtion installed on it for the DB.

SQL on that server got corrupted. SQL service is not appearing in services.msc. i have database on C drive.

at this moment i am getting error on WSUS as database cannot be connected. but if i approve the patches it is working properly.

Question.:-

if i reinstall SQL express will it keep exiting approvals intact or that will get affected?

Regards,

AVadhoot

I am trying to install WSUS on a Hyper-V guest server 2012 R2 but it is failing on the post installation task. I have done this on a number of other similar system without any problems.

I have uninstalled WSUS, IIS and WID then re-installed but still get the same error.

I have obviously done something different on this system but cannot see what.

Log from the installation is:

2015-07-16 22:24:47  Postinstall started
2015-07-16 22:24:47  Detected role services: Api, UI, WidDatabase, Services
2015-07-16 22:24:47  Start: LoadSettingsFromXml
2015-07-16 22:24:47  Start: GetConfigValue with filename=UpdateServices-Services.xml item=ContentLocal
2015-07-16 22:24:47  Value is true
2015-07-16 22:24:47  End: GetConfigValue
2015-07-16 22:24:47  Start: GetConfigValue with filename=UpdateServices-Services.xml item=ContentDirectory
2015-07-16 22:24:47  Value is F:\WSUS
2015-07-16 22:24:47  End: GetConfigValue
2015-07-16 22:24:47  Content directory is F:\WSUS
2015-07-16 22:24:47  Database roleservice is not installed
2015-07-16 22:24:47  End: LoadSettingsFromXml
2015-07-16 22:24:47  Start: Run
2015-07-16 22:24:47  Fetching WsusAdministratorsSid from registry store
2015-07-16 22:24:47  Value is S-1-5-21-60817473-2732258804-334072484-1109
2015-07-16 22:24:47  Fetching WsusReportersSid from registry store
2015-07-16 22:24:47  Value is S-1-5-21-60817473-2732258804-334072484-1108
2015-07-16 22:24:47  Configuring content directory...
2015-07-16 22:24:47  Configuring groups...
2015-07-16 22:24:47  Starting group configuration for WSUS Administrators...
2015-07-16 22:24:47  Found group in regsitry, attempting to use it...
2015-07-16 22:24:47  Searching for existing group...
2015-07-16 22:24:47  Existing group was found
2015-07-16 22:24:47  Writing group to registry...
2015-07-16 22:24:47  Finished group creation
2015-07-16 22:24:47  Starting group configuration for WSUS Reporters...
2015-07-16 22:24:47  Found group in regsitry, attempting to use it...
2015-07-16 22:24:47  Searching for existing group...
2015-07-16 22:24:47  Existing group was found
2015-07-16 22:24:47  Writing group to registry...
2015-07-16 22:24:47  Finished group creation
2015-07-16 22:24:47  Configuring permissions...
2015-07-16 22:24:47  Fetching content directory...
2015-07-16 22:24:47  Fetching ContentDir from registry store
2015-07-16 22:24:47  Value is F:\WSUS
2015-07-16 22:24:47  Fetching group SIDs...
2015-07-16 22:24:47  Fetching WsusAdministratorsSid from registry store
2015-07-16 22:24:47  Value is S-1-5-21-60817473-2732258804-334072484-1109
2015-07-16 22:24:47  Fetching WsusReportersSid from registry store
2015-07-16 22:24:47  Value is S-1-5-21-60817473-2732258804-334072484-1108
2015-07-16 22:24:47  Creating group principals...
2015-07-16 22:24:47  Granting directory permissions...
2015-07-16 22:24:47  Granting permissions on content directory...
2015-07-16 22:24:47  Granting registry permissions...
2015-07-16 22:24:47  Granting registry permissions...
2015-07-16 22:24:47  Granting registry permissions...
2015-07-16 22:24:47  Configuring shares...
2015-07-16 22:24:47  Configuring network shares...
2015-07-16 22:24:47  Fetching content directory...
2015-07-16 22:24:47  Fetching ContentDir from registry store
2015-07-16 22:24:47  Value is F:\WSUS
2015-07-16 22:24:47  Fetching WSUS admin SID...
2015-07-16 22:24:47  Fetching WsusAdministratorsSid from registry store
2015-07-16 22:24:47  Value is S-1-5-21-60817473-2732258804-334072484-1109
2015-07-16 22:24:47  Content directory is local, creating content shares...
2015-07-16 22:24:47  Creating share "UpdateServicesPackages" with path "F:\WSUS\UpdateServicesPackages" and description "A network share to be used by client systems for collecting all software packages (usually applications) published on this WSUS system."
2015-07-16 22:24:47  Deleting existing share...
2015-07-16 22:24:47  Creating share...
2015-07-16 22:24:47  Share successfully created
2015-07-16 22:24:47  Creating share "WsusContent" with path "F:\WSUS\WsusContent" and description "A network share to be used by Local Publishing to place published content on this WSUS system."
2015-07-16 22:24:47  Deleting existing share...
2015-07-16 22:24:47  Creating share...
2015-07-16 22:24:47  Share successfully created
2015-07-16 22:24:47  Creating share "WSUSTemp" with path "C:\Program Files\Update Services\LogFiles\WSUSTemp" and description "A network share used by Local Publishing from a Remote WSUS Console Instance."
2015-07-16 22:24:48  Deleting existing share...
2015-07-16 22:24:48  Creating share...
2015-07-16 22:24:48  Share successfully created
2015-07-16 22:24:48  Finished creating content shares
2015-07-16 22:24:48  Stopping service WSUSService
2015-07-16 22:24:48  Stopping service W3SVC
2015-07-16 22:24:49  Configuring WID database...
2015-07-16 22:24:49  Configuring the database...
2015-07-16 22:24:49  Establishing DB connection...
2015-07-16 22:24:49  Checking to see if database exists...
2015-07-16 22:24:49  Database exists
2015-07-16 22:24:49  Switching database to single user mode...
2015-07-16 22:24:52  Loading install type query...
2015-07-16 22:24:52  DECLARE @currentDBVersion       int
DECLARE @scriptMajorVersion     int = (9600)
DECLARE @scriptMinorVersion     int = (16384)
DECLARE @databaseMajorVersion   int
DECLARE @databaseMinorVersion   int
DECLARE @databaseBuildNumber    nvarchar(10)
IF NOT EXISTS(SELECT * FROM sys.databases WHERE name='SUSDB')
BEGIN
    SELECT 1
END
ELSE
BEGIN
    SET @currentDBVersion = (SELECT SchemaVersion FROM SUSDB.dbo.tbSchemaVersion WHERE ComponentName = 'CoreDB')
    SET @databaseBuildNumber = (SELECT BuildNumber FROM SUSDB.dbo.tbSchemaVersion WHERE ComponentName = 'CoreDB')
    DECLARE @delimiterPosition INT = CHARINDEX('.', @databaseBuildNumber)
    IF (@delimiterPosition = 0)
    BEGIN
        RAISERROR('Invalid schema version number', 16, 1) with nowait
        return
    END
    SET @databaseMajorVersion = SUBSTRING(@databaseBuildNumber, 1, @delimiterPosition - 1)
    SET @databaseMinorVersion = SUBSTRING(@databaseBuildNumber, (@delimiterPosition + 1), (10 - @delimiterPosition))
    IF @currentDBVersion < 926
    BEGIN
        SELECT 3
    END
    ELSE
    BEGIN
        IF (@scriptMajorVersion > @databaseMajorVersion OR
           (@scriptMajorVersion = @databaseMajorVersion AND @scriptMinorVersion > @databaseMinorVersion))
        BEGIN
            SELECT 2
        END
        ELSE IF (@scriptMajorVersion = @databaseMajorVersion AND
                 @scriptMinorVersion = @databaseMinorVersion)
        BEGIN
            SELECT 0
        END
        ELSE
        BEGIN
            SELECT 4
        END
    END
END

2015-07-16 22:24:52  Install type is: Reinstall
2015-07-16 22:24:52  Creating logins...
2015-07-16 22:24:52  Fetching account info for S-1-5-20
2015-07-16 22:24:52  Found principal
2015-07-16 22:24:52  Found account
2015-07-16 22:24:52  Got binary SID
2015-07-16 22:24:52  Fetching WsusAdministratorsSid from registry store
2015-07-16 22:24:52  Value is S-1-5-21-60817473-2732258804-334072484-1109
2015-07-16 22:24:52  Fetching account info for S-1-5-21-60817473-2732258804-334072484-1109
2015-07-16 22:24:52  Fetching account info for S-1-5-21-60817473-2732258804-334072484-1109
2015-07-16 22:24:52  Found principal
2015-07-16 22:24:52  Found account
2015-07-16 22:24:52  Got binary SID
2015-07-16 22:24:52  Setting content location...
2015-07-16 22:24:52  Fetching ContentDir from registry store
2015-07-16 22:24:52  Value is F:\WSUS
2015-07-16 22:24:52  Swtching DB to multi-user mode......
2015-07-16 22:24:54  Finished setting multi-user mode
2015-07-16 22:24:54  Writing DB settings to registry...
2015-07-16 22:24:54  Marking PostInstall done for UpdateServices-WidDatabase in the registry...
2015-07-16 22:24:54  Starting service W3SVC
2015-07-16 22:24:54  Configuring IIS...
2015-07-16 22:24:54  Start: ConfigureWebsite
2015-07-16 22:24:54  Configuring website on port 8530
2015-07-16 22:25:16  2015-07-16 22:24:55  Info      IISCustomAction    Performing Setup Action, Command /Install
2015-07-16 22:25:15  Info      IISCustomAction    Command /Install Succeeded

2015-07-16 22:25:16  End: ConfigureWebsite
2015-07-16 22:25:16  Configuring performance counters...
2015-07-16 22:25:16  Configuring Stats.NET perf counter...
2015-07-16 22:25:16  Configuring reporting perf counter...
2015-07-16 22:25:16  Configuring client webservice perf counter...
2015-07-16 22:25:16  Configuring server sync webservice perf counter...
2015-07-16 22:25:16  Configuring API remoting perf counter...
2015-07-16 22:25:16  Bringing services online...
2015-07-16 22:25:16  Checking initialization status...
2015-07-16 22:25:16  Database needs initialization.
2015-07-16 22:25:16  StartServer starting...
2015-07-16 22:25:16  Generating encryption key to write to the registry...
2015-07-16 22:25:16  Generating encryption key to write to the database...
2015-07-16 22:25:17  Generating encryption key succeeded...
2015-07-16 22:25:17  Setting WSUSService to autostart...
2015-07-16 22:25:17  WSUSService is set to autostart.
2015-07-16 22:25:17  Starting WSUSService...
2015-07-16 22:25:17  WSUSService is now started.
2015-07-16 22:25:17  Importing default detectoids.
2015-07-16 22:25:17  Importing CriticalUpdates.xml...
2015-07-16 22:25:17  Importing Drivers.xml...
2015-07-16 22:25:17  Importing FeaturePacks.xml...
2015-07-16 22:25:17  Importing MicrosoftCorporation.xml...
2015-07-16 22:25:17  Importing SecurityUpdates.xml...
2015-07-16 22:25:17  Importing ServicePacks.xml...
2015-07-16 22:25:17  Importing Tools.xml...
2015-07-16 22:25:17  Importing UpdateRollups.xml...
2015-07-16 22:25:17  Importing Updates.xml...
2015-07-16 22:25:17  Importing Windows.xml...
2015-07-16 22:25:17  Importing Windows2000family.xml...
2015-07-16 22:25:17  Importing WindowsServer2003DatacenterEdition.xml...
2015-07-16 22:25:17  Importing WindowsServer2003Family.xml...
2015-07-16 22:25:17  Importing WindowsXPfamily.xml...
2015-07-16 22:25:17  Importing LocalPublisher.xml...
2015-07-16 22:25:17  Importing LocallyPublishedPackages.xml...
2015-07-16 22:25:17  Importing Applications.xml...
2015-07-16 22:25:17  Importing Exchange.xml...
2015-07-16 22:25:17  Importing Office.xml...
2015-07-16 22:25:17  Importing SQL.xml...
2015-07-16 22:25:17  Importing Exchange2000Server.xml...
2015-07-16 22:25:17  Importing ExchangeServer2003.xml...
2015-07-16 22:25:17  Importing OfficeXP.xml...
2015-07-16 22:25:17  Importing Office2003.xml...
2015-07-16 22:25:17  Importing SQLServer.xml...
2015-07-16 22:25:17  Importing WindowsXP64BitEditionVersion2003.xml...
2015-07-16 22:25:17  Importing DefinitionUpdateSusXml.xml...
2015-07-16 22:25:17  Importing ClientServicingApiDetectoid.xml...
2015-07-16 22:25:17  Importing default detectoids succeeded.
2015-07-16 22:25:17  Creating default subscription.
2015-07-16 22:25:17  Instantiating UpdateServer
2015-07-16 22:25:18  CreateDefaultSubscription failed. Exception: System.Net.WebException: The request failed with HTTP status 405: Method Not Allowed.
   at System.Web.Services.Protocols.SoapHttpClientProtocol.ReadResponse(SoapClientMessage message, WebResponse response, Stream responseStream, Boolean asyncCall)
   at System.Web.Services.Protocols.SoapHttpClientProtocol.Invoke(String methodName, Object[] parameters)
   at Microsoft.UpdateServices.Internal.ApiRemoting.GetServerVersion()
   at Microsoft.UpdateServices.Internal.DatabaseAccess.AdminDataAccessProxy.GetServerVersion()
   at Microsoft.UpdateServices.Internal.BaseApi.UpdateServer.CreateUpdateServer(String serverName, Boolean useSecureConnection, Int32 portNumber)
   at Microsoft.UpdateServices.Internal.BaseApi.UpdateServer..ctor(Boolean bypassApiRemoting)
   at Microsoft.UpdateServices.Setup.StartServer.StartServer.CreateDefaultSubscription()
2015-07-16 22:25:18  StartServer encountered errors. Exception=The request failed with HTTP status 405: Method Not Allowed.
2015-07-16 22:25:18  Microsoft.UpdateServices.Administration.CommandException: Failed to start and configure the WSUS service
   at Microsoft.UpdateServices.Administration.PostInstall.Run()
   at Microsoft.UpdateServices.Administration.PostInstall.Execute(String[] arguments)

Anyone else seen this error?

Thanks

Mike

Hello,

I am in the testing phase for patching our environment. Right now the setup is that we have a live production environment and a test environment. This is separated by containers in Active Directory. Right now how it sits is that we get new patches and they are approved through a company approval process. After 2 weeks of no known issues the updates for the servers in the "BetaServers" container can be pushed to production. However, all morning I have been trying to find a way in WSUS to get a list of the updates we approved 2 weeks ago and change their approvals to the general container that houses all of our production servers. I know I can go to each server and get their own individual lists of patches that have been approved but that would take forever has we are testing 15 different servers at once.

I've used the "Update" reports function but with no resolve as we don't use downstream servers. At least that's why I believe the search results for approved and for the specific container comes up empty.

Any help would be greatly appreciated.

Many Thanks!

I am posting this question on behalf of someone who cannot post to this forum for some reason. Here's the problem:

• I have 2 servers both running Windows Server 2012.
• Server 1 = SCCM 2012 SP1 + WSUS
• Server 2 = Server 2012 =+SQL Server 2012 SP1

This is a brand new install, not an upgrade or migration.

• When I use WID locally it is fine. But I can't use WID as IT wants to use the SQL we have so their SQL team can manage it like any other SQL DB

Here is the error:

2013-06-13 08:57:22  Generation of encryption key to save to the database failed. Error=System.IndexOutOfRangeException: Index was outside the bounds of the array.   at Microsoft.UpdateServices.Internal.DatabaseAccess.AdminDataAccess.ExecuteSPGetConfiguration()   at Microsoft.UpdateServices.Internal.BaseApi.UpdateServerConfiguration.Load()   at Microsoft.UpdateServices.Setup.StartServer.StartServer.GenerateNewDatabaseEncryptionKey()
2013-06-13 08:57:22  StartServer encountered errors. Exception=Index was outside the bounds of the array.
2013-06-13 08:57:22  Microsoft.UpdateServices.Administration.CommandException: Failed to start and configure the WSUS service   at Microsoft.UpdateServices.Administration.PostInstall.Run()   at Microsoft.UpdateServices.Administration.PostInstall.Execute(String[] arguments)
Fatal Error: Failed to start and configure the WSUS service

Any ideas? I am following up internally and will update this thread if I find out anything more.

Hello everyone,
I got the problem on my Windows Server 2012 R2 that I'm not able to install windows updates anymore. I searched for the error I got and found many different ways to solve this issue and I tried all of them. I tried to:

-Correct the date and time in the control panel
-Sync with an internet time server (time.windows.com) but got an error that it's not able to synchronize cause the time period expired
-run SFC scannow and solve all problems shown
-do most things written on this side (http://www.techsupportforum.com/forums/f320/solved-windows-update-error-80072f8f-885129-2.html)
-Restart the Windows Time Service
-Check all the needed Certificates if there are any errors
-Use the problem control from Microsoft
-Check if it had anything to do with my VM not being part of the domain (I installed updates before so I guess that's not really a problem)
-Confirm if any changes were made regarding internet security in our companies environment (nothing changed)
-Run this command: DISM /Online /Cleanup-Image /RestoreHealth (got an error that the source files can't be downloaded)
-Try to re-register corrupted dlls

Nothing from the things above could solve my problem and I don't have any idea what I should do next. Since this VM is used as a App-V Sequencer it needs to be up-to-date.

Note: The snapshot I have from this VM is right after I installed updates last time but I checked before if everything is alright, still I have this problem now and it makes no difference using the snapshot.

If anyone has an idea on how to fix that problem I would be grateful.