Hi all,

I have installed WSUS (Version: 6.3.9600.18694) on 2012 R2 OS. I have a WSUS GPO applied 2016 operating systems machines. GPO is applied properly and registry is pointing to my WSUS server. 

But,

The approved patches are not getting downloaded. stuck at 0%.

Please help

Regards,

Santhosh B S 

Regards, Santhosh B S

Hello,

I have a problem that the needing download files in the administrative console of the wsus doesn't change , first time it was 15.75 MB out of 37MB and i left for a whole day and nothing happened the internet connection is stable also i read about the problem most of the people said that maybe the firewall AV (antivirus) i checked it and the ip of the server is excluded from that policy after that i removed the role and i installed the wsus again this time it is at 0 MB out of 3 MB i approved only one update to installed the server successfully synchronised  with the Microsoft . 

note:the need update files change when you approve more updates 

Thank you 

zenab Mohammed

WSUS 3.0 server reporting updates are not applicable for 2016 servers although patches have been downloaded and installed on 2016 servers.

Windows 2016 WindowsUpdate.log server log shows many of the below errors.

1600/12/31 16:00:00.0000000 336   4360   Unknown( 20): GUID=aa07f95d-91be-3f47-51b3-717e4c7ddc98 (No Format Information found).

Other log information is available as seen below.

2018/09/10 11:01:34.7825710 336   3776  Agent           Windows Update access disabled: No
2018/09/10 11:01:34.7884881 336   3776  Agent               Timer: 29A863E7-8609-4D1E-B7CD-5668F857F1DB, Expires 2018-09-10 22:19:19, not idle-only, not network-only
2018/09/10 11:01:34.9205997 336   4612  Shared          UpdateNetworkState Ipv6, cNetworkInterfaces = 0.
2018/09/10 11:01:34.9206100 336   4612  Shared          UpdateNetworkState Ipv4, cNetworkInterfaces = 1.
2018/09/10 11:01:34.9206200 336   4612  Shared          Power status changed
2018/09/10 11:01:34.9358876 336   3776  Agent           Initializing Windows Update Agent
2018/09/10 11:01:34.9373960 336   3776  DownloadManager Download manager restoring 0 downloads
2018/09/10 11:01:34.9398053 336   3776  Agent           CPersistentTimeoutScheduler | GetTimer, returned hr = 0x00000000
2018/09/10 11:01:37.4730121 336   1592  DownloadManager PurgeExpiredFiles::Found 3 expired files to delete.
2018/09/10 11:01:37.4730293 336   1592  DownloadManager PurgeExpiredFiles::Deleting expired file at C:\Windows\SoftwareDistribution\Download\bd0d73364bf854970f570a2cf51388b435720e6d.
2018/09/10 11:01:37.4776616 336   1592  DownloadManager PurgeExpiredFiles::Deleting expired file at C:\Windows\SoftwareDistribution\Download\48174db2b72cce60c7969dc197020c8ca58c9045.
2018/09/10 11:01:37.4831928 336   1592  DownloadManager PurgeExpiredFiles::Deleting expired file at C:\Windows\SoftwareDistribution\Download\9dcadf092f9e4cca339b5f98a160086902733280.
2018/09/10 11:01:37.5496229 336   1592  DownloadManager PurgeExpiredUpdates::Found 374 non expired updates.
2018/09/10 11:01:37.6491746 336   1592  DownloadManager PurgeExpiredUpdates::Found 3 expired updates.
2018/09/10 11:01:37.7071502 336   1592  DownloadManager PurgeContentForPatchUpdate::Deleting update content at C:\Windows\SoftwareDistribution\Download\898f9fe4b16d1628e7699c9bf1d04700.
2018/09/10 11:01:37.7330569 336   1592  Shared          Effective power state: AC
2018/09/10 11:01:37.7330597 336   1592  DownloadManager Power state change detected. Source now: AC
2018/09/10 11:12:41.8143733 336   3772  Agent           Earliest future timer found:
2018/09/10 11:12:41.8143912 336   3772  Agent               Timer: 29A863E7-8609-4D1E-B7CD-5668F857F1DB, Expires 2018-09-10 22:19:19, not idle-only, not network-only
2018/09/10 11:12:42.8306986 336   4612  Agent           Earliest future timer found:
2018/09/10 11:12:42.8307130 336   4612  Agent               Timer: 29A863E7-8609-4D1E-B7CD-5668F857F1DB, Expires 2018-09-10 22:19:19, not idle-only, not network-only
2018/09/10 11:12:42.8343566 336   4612  Misc            CreateSessionStateChangeTrigger, TYPE:2, Enable:No
2018/09/10 11:12:42.8343620 336   4612  Misc            CreateSessionStateChangeTrigger, TYPE:4, Enable:No
2018/09/10 11:12:42.8776383 336   4612  Handler         CUHCbsHandler::CancelDownloadRequest called
2018/09/10 11:12:42.9330548 336   4612  Shared          * END * Service exit Exit code = 0x240001

An attempt was made to use the Microsoft's public symbol server with no success.

https://docs.microsoft.com/en-us/windows-hardware/drivers/debugger/microsoft-public-symbols

This is consistent throughout the Windows 2016 platform. Windows 2008 ad 2012 systems report correctly.

WSUS installation won't finish the post-installation tasks. See below last bit of lines from the tmp error report.]

Server 2012 Standard.

Any advice?

2018-11-23 21:35:31  Fetching ContentDir from registry store
2018-11-23 21:35:31  Value is C:\WSUS_updates
2018-11-23 21:35:31  Swtching DB to multi-user mode......
2018-11-23 21:35:32  Finished setting multi-user mode
2018-11-23 21:35:32  Writing DB settings to registry...
2018-11-23 21:35:32  Marking PostInstall done for UpdateServices-WidDatabase in the registry...
2018-11-23 21:35:32  Configuring IIS...
2018-11-23 21:35:32  Start: ConfigureWebsite
2018-11-23 21:35:32  System.Runtime.InteropServices.COMException (0x8007000D): The data is invalid.

   at System.DirectoryServices.DirectoryEntry.Bind(Boolean throwIfFail)
   at System.DirectoryServices.DirectoryEntry.Bind()
   at System.DirectoryServices.DirectoryEntry.get_AdsObject()
   at System.DirectoryServices.PropertyValueCollection.PopulateList()
   at System.DirectoryServices.PropertyValueCollection..ctor(DirectoryEntry entry, String propertyName)
   at System.DirectoryServices.PropertyCollection.get_Item(String propertyName)
   at Microsoft.UpdateServices.Administration.UseCustomWebSite..ctor()
   at Microsoft.UpdateServices.Administration.PostInstall.ConfigureWebsite(Int32 portNumber)
   at Microsoft.UpdateServices.Administration.PostInstall.Run()
   at Microsoft.UpdateServices.Administration.PostInstall.Execute(String[] arguments)
Fatal Error: The data is invalid.

I forcefully stopped the windows update from past 1 year by Checking this Option "Never Check for Updates". But 4 days before "the server restarted by the windows update issue on 24/11/2018 and started the roll back process for the installed update due to installation problem". My Question is that i stopped the updates forcefully then why server automatically downloaded the updates and installed and automatically restarts without generating any notification. Tell me if i check "Never Check for updates" option then after how many days or months or years it will automatically update its updates. I did not find answer of this question anywhere kindly tell about this.

Hello,

I think there might be an issue with downstream servers in server wsus 2019.

First I did update my main WSUS to 2019. All Downstream were 2016. After that I was not able to view the complete computer list on the main server. As soon as you choose the “All Computers” or a computer group that is from a downstream server the console crashes. When you delete the downstream server from the “Downstream Servers” section I am able to browse the list again.

After that I decided to reinstall all WSUS Servers with server 2019 even including the main one. And I did again get the error.

Tried it via Powershell gives me the following error.

$wsusserver = "localhost"
[reflection.assembly]::LoadWithPartialName("Microsoft.UpdateServices.Administration")
$wsus = [Microsoft.UpdateServices.Administration.AdminProxy]::getUpdateServer($wsusserver,$False)
$computerScope = New-object Microsoft.UpdateServices.Administration.ComputerTargetScope
$computerScope.IncludeDownstreamComputerTargets = $true
$wsus.GetComputerTargets($computerScope)

Exception calling "GetComputerTargets" with "1" argument(s):"Unable to cast object of type 'System.Guid' to type 'System.String'."

At line:1 char:1

If I choose to not include Downstream Computer Targets it works.

So I discovered tonight that you can not install the RSAT On Demand features for Windows 10 1809 from your WSUS server. I am wondering when Microsoft will release them for us to approve in WSUS. Since I disable the clients access to Windows Update this makes it a challenge. Hopefully it will be very soon.

Thanks

Darren

Hello,

I am facing issues with October and November Security Monthly Updates.

The updates are reverting at 94% or sometimes 96%. 

The error code I am getting is 80070422. Error details from Windows Update Log:

I have already installed KB3177467. Still doesn't work. Tried all other troubleshooting steps with no success.

Please find the Windowsupdates.log and CBS logs here:

https://1drv.ms/f/s!AsGLe0aBawYWaisLxWvlLk9697w

Any help will be appreciated.

Regards,

MMK

What I want to know is, where can I go to find a list of the latest servicing stack update for each version of Windows ?

I've tried and you can't search the Windows Update Catalogue, WSUS or System Center, as the update's Details page just contains generic rubbish like this (below).  The only place I can find actual details on a servicing stack update is on the Microsoft Knowledge Base listing, but this requires that I be aware of the servicing stack update's release and its KB number.  I want to know, at any given point in time, all the latest servicing stack updates by Windows version.  This will enable me to make sure they're pushed out on our servers before I push out other updates using SCCM / WSUS, so the update process is as reliable as possible.

Edit: For clarification, the 'Servicing Stack' in Windows is the Windows Update client.  Like all other Windows components, it gets patched from time-to-time.  Which is to say Windows Update gets updated by itself.  I'm seeking a list of the latest versions of these updates.

Bulletin ID:

-- huddie71 ~~If you~re not seeking help or offering it, you probably shouldn~t be here.~~

how can I find the name of the computers in my office account

dov

Hi -

I have a number of machines with a bloated Windows\SoftwareDistribution folder.  I usually address this by:

1. Stopping the Automatic Updates service.
2. Deleting the Windows\SoftwareDistribution folder.
3. Restarting the Automatic Updates service.

I'm considering using a computer startup script to perform this task automatically.  Does anyone have a more elegant method of automating this task?

Thanks in advance for your input.

WSUS Clients(Servers and Desktops) are unable to get patches downloaded.

Can someone help in this regards please.

Hello,

I am trying to run a powershell script on a Windows Server 2016 to find, download and install updates, but I get the following error:

Exception from HRESULT: 0x80240438

...

+ $result = $updateSearcher.Search("IsInstalled=0 and Type='Software'")

+ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

    + CategoryInfo          : OperationStopped: (:) [], COMException

    + FullyQualifiedErrorId : System.Runtime.InteropServices.COMException

Here is my script:

Write-Host "Installing WSUS-Updates"

$updateSession = New-Object -Comobject Microsoft.Update.Session

$updateSearcher = $updateSession.CreateUpdateSearcher()

$result = $updateSearcher.Search("IsInstalled=0 and Type='Software'")

if ($result.Updates.Count -eq 0){

    Write-Host "No available updates" 

    exit

}

$updatesToDownload = New-Object -Comobject Microsoft.Update.UpdateColl

foreach ($update in $result.Updates){

    $updatesToDownload.Add($update)

}

$downloader = $updateSession.CreateUpdateDownloader()

$downloader.Updates = $updatesToDownload

$downloadResult = $downloader.Download()

$updatesToInstall = New-Object -Comobject Microsoft.Update.UpdateColl 

foreach ($update in $result.Updates){

    if ($update.IsDownloaded) {$updatesToInstall.Add($update)}

}

$installer = $updateSession.CreateUpdateInstaller()

$installer.Updates = $updatesToInstall

$installationResult = $installer.Install()

exit

I tried running it with admin privileges also, but did not help.

WUServer and WUStatusServer register keys are set to the same path (I read that this may be the problem..)

What could possibly cause the issue?

Thank you in advance!!

It appears there is a bug in WSUS 2016 server, though i have a feeling it exists in other versions. The bug has to do with WSUS updates applied to Windows 10, it appears that on a domain if you have a mixture of Revisions installed like 1703, 1709 and 1803, you cannot update them based on updates that appear.. 

For instance.. 

Upgrade windows 10 to 1803, but then have a 1709 system that needs a security patch, the WSUS server will downgrade the 1803 system to 1709 and apply the security patch, without just skipping that machine due to the difference in the revision. 

Would like to add that once the system is rolled back, it will no longer install 1803 without running a windows update repair script against the system.. This is a BIG issue on Domains with many machines.. 

Rob

I am trying to collect a report that shows all failed computers and the error message.  With 5,000 computers this script took 12 hours to run.  I'm wondering if there is a more efficient way to do this.

Function Get-WSUSReport
{
    param(
        [string[]]$recipients,
        [string]$smtpServer,
        [string]$from,
        [string]$wsusServerName,
        [string]$rootDirectory
    )

    [reflection.assembly]::LoadWithPartialName("Microsoft.UpdateServices.Administration") | Out-Null

    $wsus1 = [Microsoft.UpdateServices.Administration.AdminProxy]::getUpdateServer($wsusServerName, $False, 8530)

    $computerscope = New-Object Microsoft.UpdateServices.Administration.ComputerTargetScope

    $updatescope = New-Object Microsoft.UpdateServices.Administration.UpdateScope

    $targets = $wsus1.GetSummariesPerComputerTarget($updatescope,$computerscope) | 
        Select @{L='ComputerTarget';E={($wsus1.GetComputerTarget([guid]$_.ComputerTargetId)).FullDomainName}}, 
        @{L='ComputerTargetGroupIds';E={($wsus1.GetComputerTarget([guid]$_.ComputerTargetId)).ComputerTargetGroupIds}},
        ComputerTargetId, NotInstalledCount, FailedCount 
    
    $dateFrom = (Get-Date).AddYears(-1)
    $dateTo = Get-Date
    $updateEventHistory1 = $wsus1.GetUpdateEventHistory("$dateFrom", "$dateTo")# | 
        #Where {$_.HasAssociatedUpdate -eq $true -and $_.Status -eq 'Failed'}
    $dateFrom = (Get-Date).AddYears(-2)
    $dateTo = (Get-Date).AddYears(-1)
    $updateEventHistory2 = $wsus1.GetUpdateEventHistory("$dateFrom", "$dateTo")# | 
        #Where {$_.HasAssociatedUpdate -eq $true -and $_.Status -eq 'Failed'}
    $updateEventHistory = $updateEventHistory1 + $updateEventHistory2

    $groups = $wsus1.GetComputerTargetGroups()
    $failedMembers = @{}
    $notInstalledMembers = @{}
    $allMembers = @{}
    ForEach($group in $groups)
    {
        $failedMembers.Add($group.Id, @())
        $notInstalledMembers.Add($group.Id,@())
        $allMembers.Add($group.Id,@()) 
    }
    ForEach($target in $targets)
    {
        ForEach($groupId in $target.ComputerTargetGroupIds)
        {
            $allMembers[$groupId] += $target
        }
        if($target.FailedCount -gt 0)
        {
            $failedUpdates = $wsus1.GetComputerTarget([guid]$target.ComputerTargetId).GetUpdateInstallationInfoPerUpdate() |
                Where UpdateInstallationState -eq 'Failed'
            [string[]]$failedUpdateMessages = @()
            ForEach($failedUpdate in $failedUpdates)
            {
                $failedUpdateMessages += ($updateEventHistory |
                    Where {$failedUpdate.UpdateId -eq $_.UpdateId.UpdateId -and $target.ComputerTargetId -eq $_.ComputerId} |
                    Sort-Object -Property "CreationDate" -Descending | Select -First 1).Message

            }
            $failedUpdateMessagesJoined = $failedUpdateMessages -join ([Environment]::NewLine + [Environment]::NewLine)
            $target_temp = $target 
            $target_temp | Add-Member -NotePropertyName FailedUpdates -NotePropertyValue $failedUpdateMessagesJoined -Force
            ForEach($groupId in $target.ComputerTargetGroupIds)
            {
                $failedMembers[$groupId] += $target_temp

            }            
        }
        if($target.NotInstalledCount -gt 0)
        {
            ForEach($groupId in $target.ComputerTargetGroupIds)
            {
                $notInstalledMembers[$groupId] += $target
            }            
        }

    }

    $root = "C:\Scripts\WSUSReport"
    $summary = @()
    $attachments = @()
    $dateShort = $(Get-Date -Format MM-dd-yyyy)
    ForEach($group in $groups)
    {
        $title = "WSUS Failed $($group.Name) $dateShort"
        $html = $failedMembers[$group.id] | Select ComputerTarget, NotInstalledCount, FailedCount, FailedUpdates | Sort-Object ComputerTarget | ConvertTo-Html -Title $title

        $finalHTML = ($html -replace "<table", "<table border='0' cellspacing='0' cellpadding='0' style='border: 1px solid black; border-collapse: collapse;'")
        $finalHTML = ($finalHTML -replace "<th", "<th border='0' cellspacing='0' cellpadding='0' style='border: 1px solid black; border-collapse: collapse; padding:5px;'")
        $finalHTML = ($finalHTML -replace "<td>", "<td border='0' cellspacing='0' cellpadding='0' style='border: 1px solid black; border-collapse: collapse; padding:5px;'><pre>")
        $finalHTML = ($finalHTML -replace "</pre></td>")
        $finalHTML | Out-File "$rootDirectory\$title.html"
        $attachments += "$rootDirectory\$title.html"
        $obj = New-Object PSObject -Property ([Ordered] @{
            'Computer Group'            = $group.Name;
            'Computers'                 = $allMembers[$group.id].Count
            'Computers Needing Updates' = $notInstalledMembers[$group.id].Count
            'Computers with Errors'     = $failedMembers[$group.id].Count
	    }) #End PSObject 
        $summary += $obj
    }

    $body = $summary | ConvertTo-Html | Out-String

    $params = @{
        'SmtpServer'  = $smtpServer;
        'From'        = $from;
        'To'          = $recipients;
        'Subject'     = "WSUS Report - Failed Computers Attached";
        'Body'        = $body;
        'BodyAsHtml'  = $true;
        'Attachments' = $attachments
    }
    Send-MailMessage @params
}

Hi, In the bellow picture what does mean "Not Installed" in the update list?

Dear Microsoft technical support,

Recently a few month, we have some physical server (run windows server 2008 R2) install windows update file (KB) failure through WSUS. When install windows update completed, server reboot, enter windows system, screen display "Failure Configuring Windows Updates Reverting change" message. 

I refers your technical document (below link) and try to fix this windows update problem

https://support.microsoft.com/en-us/help/2509997/you-can-t-install-updates-on-a-windows-based-computer

Please find attach report as below. This report record my solution result. But not successful finally.

https://drive.google.com/drive/folders/17reWlZ4I76K9_D65L7M-xvraiM3h3tpP (file name: Report for resolve windows update installation failure.doc)

I also send you below log files. Please help check and provide solution to me. Thank you very much

https://drive.google.com/drive/folders/17reWlZ4I76K9_D65L7M-xvraiM3h3tpP

(file name: CBS.log / CheckSUR.log / WindowsUpdate.log)

Thank you very much

Best regards

Vincent Kan

Dear Microsoft Server Support Team,

KB4462923install failed in "Windows Server 2008 R2 Standard" operation system, open Event Viewer, find error message: Installation Failure: Windows failed to install the following update with error 0x80070020: 2018-10 Security Monthly Quality Rollup for Windows Server 2008 R2 for x64-based Systems (KB4462923).  [Event ID: 20]

1. Why KB4462923 install failed ?  

2. How to fix this issue ?   

Hi, I have a regular issue with my WSUS box. It's Windows Server 2016 with 4GB of RAM, and WSUS regularly stops working on it.

In the Event Log, I get a SQL Server event form the WID with Event ID 17890:

"A significant part of sql server process memory has been paged out. This may result in a performance degradation. Duration: 0 seconds. Working set (KB): 301216, committed (KB): 698220, memory utilization: 43%%."

The next entry in the event log is typically under 10 minutes later, and it's 7 events from WSUS saying the various bits aren't working (13042,12002,12012,12032,12022,12042,12052,12072). These will continue until I reboot.

I've tried restarting the WSUS services once a week using the following Powershell, but this doesn't fix the issue:

Stop-Service WSUSService,W3SVC,'MSSQL$MICROSOFT*'
Start-Service 'MSSQL$MICROSOFT*',W3SVC,WSUSService

This executes ok but doesn't fix the issue. I thought restarting SQL Server would make it all start working again, but it doesn't. If I do a reboot, this does fix it every time. But, I'd rather configure my server better than force a reboot once a week.

I do already run cleanup scripts on the database, using the famous "run once a month database cleanup" script that MS wrote and put up on technet, that does the reindexing etc. I also run Invoke-WsusServerCleanup each night, do Declines once a month, and all the things you're supposed to do to keep your WSUS database clean and tidy and optimal, and as part of the install I set the IIS memory limit:

[int64]$PrivMemMax = 2.5GB / 1024 # Value in KB
Set-ItemProperty IIS:\AppPools\WsusPool -Name Recycling.periodicrestart.privateMemory -Value $PrivMemMax

But none of this seems to help with SQL Server needing to page out every so often, and at random times.

Can you suggest what I can do? If I can run some Powershell to set some limits or configure the SQL WID process better when I build the machine, this would be ideal.

Thanks.