FOR MICROSOFT:

Hello,

today after installation of  KB4480970 (automatically by Windows Update as Important) to our Windows 2008 R2 Standard Server the server stopped serve Clients by shared storage (haven't tried anything else).  The Client has issued an error Invalid handle and couldn't connect (tried on Windows 7 Pro SP1 clients with installed KB4480970 only). After uninstallation it started work again, so the problem is positively in the KB4480970. Pls stop distribute the KB4480970 to the Windows 2008 R2 Server and correct the behavior. Thank You in advance.

Windows 7, 8, 10 workstation's all getting same type of error.  All stuck at 0%

There were problems installing some updates, but we'll try again later. If you keep seeing this and want to search the web or contact support for information, this may help:

2018-12 Update for Windows 10 Version 1803 for x64-based Systems (KB4477137) - Error 0x80d02002

2019-01 Cumulative Update for Windows 10 Version 1803 for x64-based Systems (KB4480966) - Error 0x80d02002

Good day.

Starting info:

Wsus server with the following products configured:

• Windows 7
• windows 8.1
• Windows 10 (all releases)

I haven't found answer for this question searching internet or this forum, so I hope some of you can help me.

Question

Does the Wsus client receive a full list of the Wsus Updates or is already filtered to its operating system?

Clarification of question

We have different operating system in our enviroment, We are worried about overloading the Wsus server, that bringed our question up.

To our understanding, there are two possibilites:

1. The wsus client ask the server for the 100% of the updates, and is the client how choses which one applies to its system
2. The wsus client ask the server with conditions like "I'm windows 7" and the server filters the updates only to the client.

The idea is to know if we must split our enviroment in different groups, and lower the load of the Wsus server, or we are in the option 2 and wsus is clever enough to optimize the info and the bandwith.

Thanks in advance.

Hi 

I am having an issue installing the monthly update rollups and security only updates on one 2012 R2 server all other updates install fine. I have run sfc /scannow and dism /online /cleanup-image /restorehealth and neither are retuning any errors. I have run the Windows update troubleshooter and this is not returning any errors either. I have checked the windows update logs and I am getting this error 2017-07-01 21:30:16:179          5576   13a4            Handler           FATAL: CBS called Error with 0x800f0831. I checked the CBS log and the error looks like it is being cause by KB3205401 which is the December 2016 security Monthly update. Below is the export from the CBS log. 

2017-07-01 21:30:09, Error                 CBS    Failed to resolve package 'Package_262_for_KB3205401~31bf3856ad364e35~amd64~~6.3.1.4' [HRESULT = 0x800f0831 - CBS_E_STORE_CORRUPTION] 2017-07-01 21:30:09, Info                  CBS    Mark store corruption flag because of package: Package_262_for_KB3205401~31bf3856ad364e35~amd64~~6.3.1.4. [HRESULT = 0x800f0831 - CBS_E_STORE_CORRUPTION] 2017-07-01 21:30:09, Info                  CBS    Failed to resolve package [HRESULT = 0x800f0831 - CBS_E_STORE_CORRUPTION] 2017-07-01 21:30:09, Info                 CBS    Failed to get next package to re-evaluate [HRESULT = 0x800f0831 - CBS_E_STORE_CORRUPTION] 2017-07-01 21:30:09, Info                  CBS   Failed to process component watch list. [HRESULT = 0x800f0831 - CBS_E_STORE_CORRUPTION] 2017-07-01 21:30:09, Info                  CBS    Perf: InstallUninstallChain complete. 2017-07-01 21:30:09, Info                  CSI    00000204@2017/7/1:20:30:09.086 CSI Transaction @0x213678f590 destroyed 2017-07-01 21:30:09, Info                  CBS    Exec: Store corruption found during execution, but auto repair is already attempted today, skip it. 2017-07-01 21:30:09, Info                  CBS    Failed to execute execution chain. [HRESULT = 0x800f0831 - CBS_E_STORE_CORRUPTION] 2017-07-01 21:30:09, Error                 CBS    Failed to process single phase execution. [HRESULT = 0x800f0831 - CBS_E_STORE_CORRUPTION] 2017-07-01 21:30:09, Info                 CBS    WER: Generating failure report for package: Package_for_RollupFix~31bf3856ad364e35~amd64~~9600.18720.1.4, status: 0x800f0831, failure source: Execute, start state: Staged, target state: Installed, client id: WindowsUpdateAgent 2017-07-01 21:30:09, Info                  CBS    Not able to query DisableWerReporting flag.  Assuming not set... [HRESULT = 0x80070002 - ERROR_FILE_NOT_FOUND] 2017-07-01 21:30:09, Info                  CBS    Added C:\Windows\Logs\CBS\CBS.log to WER report. 2017-07-01 21:30:09, Info                  CBS    Added C:\Windows\Logs\CBS\CbsPersist_20170701202500.log to WER report. 2017-07-01 21:30:09, Info                  CBS    Added C:\Windows\Logs\CBS\CbsPersist_20170701142518.log to WER report. 2017-07-01 21:30:09, Info                 CBS    Added C:\Windows\Logs\CBS\CbsPersist_20170701123109.log to WER report. 2017-07-01 21:30:09, Info                  CBS    Added C:\Windows\Logs\CBS\CbsPersist_20170701114250.log to WER report. 2017-07-01 21:30:09, Info                  CBS    Added C:\Windows\Logs\CBS\CbsPersist_20170701105137.log to WER report. 2017-07-01 21:30:09, Info                 CBS    Not able to add %windir%\winsxs\pending.xml to WER report. [HRESULT = 0x80070002 - ERROR_FILE_NOT_FOUND] 2017-07-01 21:30:09, Info                  CBS    Not able to add %windir%\winsxs\pending.xml.bad to WER report. [HRESULT = 0x80070002 - ERROR_FILE_NOT_FOUND] 2017-07-01 21:30:09, Info                  CBS    Reboot mark cleared 2017-07-01 21:30:09, Info                 CBS    Winlogon: Deregistering for CreateSession notifications 2017-07-01 21:30:09, Info                  CBS    Winlogon: Stopping notify server 2017-07-01 21:30:09, Info                  CBS    Winlogon: Unloading SysNotify DLL 2017-07-01 21:30:09, Info                  CBS    FinalCommitPackagesState: Started persisting state of packages 2017-07-01 21:30:10, Info                  CBS    SQM: Reporting package change for package: Package_for_RollupFix~31bf3856ad364e35~amd64~~9600.18720.1.4, current: Staged, pending: Default, start: Staged, applicable: Installed, target: Installed, limit: Installed, hotpatch status: DisabledBecauseNoHotpatchPackagesInitiated, status: 0x0, failure source: Execute, reboot required: False, client id: WindowsUpdateAgent, initiated offline: False, execution sequence: 1254, first merged sequence: 1254 reboot reason: REBOOT_NOT_REQUIRED RM App session: -1 RM App name: N/A FileName in use: N/A 2017-07-01 21:30:13, Info                  CBS   SQM: Upload requested for report: PackageChangeBegin_Package_for_RollupFix~31bf3856ad364e35~amd64~~9600.18720.1.4, session id: 142859, sample type: Standard 2017-07-01 21:30:13, Info                  CBS   SQM: Ignoring upload request because the sample type is not enabled: Standard 2017-07-01 21:30:13, Info                  CBS    SQM: Reporting package change completion for package: Package_for_RollupFix~31bf3856ad364e35~amd64~~9600.18720.1.4, current: Staged, original: Staged, target: Installed, status: 0x800f0831, failure source: Execute, failure details: "(null)", client id: WindowsUpdateAgent, initiated offline: False, execution sequence: 1254, first merged sequence: 1254, pending decision: InteractiveInstallFailed, primitive execution context: Interactive  2017-07-01 21:30:13, Info                  CBS    SQM: execute time performance datapoint is invalid. [HRESULT = 0x80070490 - ERROR_NOT_FOUND] 2017-07-01 21:30:13, Info                  CBS    SQM: Failed to initialize Win SAT assessment. [HRESULT = 0x80040154 - Unknown Error] 2017-07-01 21:30:13, Info                 CBS    SQM: average disk throughput datapoint is invalid [HRESULT = 0x80040154 - Unknown Error]

I tried to find the update to uninstall and try reinstalling but it is now showing on this server and when i try to run the install for the update it says the update is not applicable. Just wondering if anyone else has seen this issue as I can’t seem to find a fix. 

Thanks

Hi,

My WSUS is reporting that all my servers (2012, 2012 R2, 2016) do not need KB4476698. I have checked that at least 5 servers have the directory path that contains the vulnerable visual studio exe file. Nessus scan have confirmed the servers require that patch. 

WSUS Downloaded KB4016509 Update for Windows 10, but there is no corresponding KB Article for this update. https://support.microsoft.com/en-us/help/4016509

Has this Update been withdrawn?  Where is the KB Article?

KB 4016509
English LanguagePack - Windows 10 Version 1703 for x64-based Systems - (KB4016509) [en-US_LP]

Description:  After you install this language pack, you can make it the display language.  Swipe in from the right edge of the screen (if you're using a mouse, point to the upper-right corner of the screen and move the mouse pointer down) and tap or click "Search."  Enter "language", tap or click "language" and then tap or click "Add a language to this device."  Select the installed language pack, then tap or click "Move up" until it's at the top of the list.  Sign out and then sign back in to finish.
Classification: Updates

Products: Windows 10 Language Packs

MSRC Severity Rating:  Unspecified

MSRC Number:  None

More Information:  https://support.microsoft.com/en-us/help/4016509

Update needed by 2 computers.

Hi Everyone. Can anyone tell me why I keep getting the following error message when launching WSUS. When I click 'reset Server node' nothing happens. It seems the only way to remedy the problem is to reboot the server which is counter productive. Once the server comes back up it works fine until after a period of time. I have researched this but haven't found a solution. Any thoughts would be appreciated.

Support analyst

Support analyst

I wanted to try out a test 2019 WSUS server. Everything seemed to go smoothly, however when I go look at All Computers, I get a system node crash.

I looked at the possibility of it being the same as the bad BIOS name, but I do not seem to see any errors.

The error is as follows:

The WSUS administration console has encountered an unexpected error. This may be a transient error; try restarting the administration console. If this error persists, 

Try removing the persisted preferences for the console by deleting the wsus file under %appdata%\Microsoft\MMC\.


System.InvalidCastException -- Unable to cast object of type 'System.Guid' to type 'System.String'.

Source
Microsoft.UpdateServices.BaseApi

Stack Trace:
   at Microsoft.UpdateServices.Internal.BaseApi.SoapExceptionProcessor.DeserializeAndThrow(SoapException soapException)
   at Microsoft.UpdateServices.Internal.DatabaseAccess.AdminDataAccessProxy.ExecuteSPSearchComputers(String computerTargetScopeXml)
   at Microsoft.UpdateServices.Internal.BaseApi.ComputerTarget.SearchComputerTargets(ComputerTargetScope searchScope, UpdateServer updateServer)
   at Microsoft.UpdateServices.UI.AdminApiAccess.ComputerTargetManager.GetComputerTargets(ComputerTargetScope searchScope)
   at Microsoft.UpdateServices.UI.AdminApiAccess.BulkComputerPropertiesCache.GetAndCacheComputers(ExtendedUpdateScope updateScope, ComputerTargetScope computerTargetScope)
   at Microsoft.UpdateServices.UI.SnapIn.Pages.ComputersListPage.GetListRows()

Has anyone come across this error before?

Thanks.

Hello,

I think there might be an issue with downstream servers in server wsus 2019.

First I did update my main WSUS to 2019. All Downstream were 2016. After that I was not able to view the complete computer list on the main server. As soon as you choose the “All Computers” or a computer group that is from a downstream server the console crashes. When you delete the downstream server from the “Downstream Servers” section I am able to browse the list again.

After that I decided to reinstall all WSUS Servers with server 2019 even including the main one. And I did again get the error.

Tried it via Powershell gives me the following error.

$wsusserver = "localhost"
[reflection.assembly]::LoadWithPartialName("Microsoft.UpdateServices.Administration")
$wsus = [Microsoft.UpdateServices.Administration.AdminProxy]::getUpdateServer($wsusserver,$False)
$computerScope = New-object Microsoft.UpdateServices.Administration.ComputerTargetScope
$computerScope.IncludeDownstreamComputerTargets = $true
$wsus.GetComputerTargets($computerScope)

Exception calling "GetComputerTargets" with "1" argument(s):"Unable to cast object of type 'System.Guid' to type 'System.String'."

At line:1 char:1

If I choose to not include Downstream Computer Targets it works.

Houdy guys,

I've recently encountered a strange behavior with installing WSUS using SQL that has a custom connection port at a client's environment.

I've found some posts here and on other forums stating that this is a known WSUS bug, where it cannot connect to SQL using the custom port during the post installation phase (connection to SQL using the custom port was successful during the WSUS role installation in the Server Manager).

I have tried configuring an alias for the connection to SQL using SQL Server Client Network Utility (cliconfig.exe) that will also hold the custom connection port, but to no avail, while SQL Management Studio is able to connect to the SQL instance using either [FQDN],[PORT] or the alias I have configured, WSUS post installation task still gives me the "No host is known" error when trying to connect to SQL:

Configuring database...
No such host is known

I have also trying to invoke the post installation command using WSUSUTIL.exe in the following format, but I still get to the same result:

Both the server's computer account and the account running the WSUS post installation task has sysadmin roles on the SQL instance, and the DB is operational as we were able to successfully deploy SCCM into it (WSUS and SCCM reside on the same server).

The custom port for SQL was a requirement from the customer, and I'm not so keen on changing the port whil SCCM is still using the instance with the custom port.

Any assistance would be welcome.

Thanks.

VT

Hello, I have to say the WSUS product overview went sideways with the change from Windows 7 -> Windows 10! There are literally 30 entries relating to windows 10 in some sort and I dont really know which ones I need to download. For the servers I have Windows Server 2016 and Windows Server 2016 and later servicing drivers.

My Windows 10 instances always run on the latest version or before - so 1803/1809 maybe some that havent been updated on 1709. Now there are later upgrades and servicing drivers and laungage interface packs - language packs - GDR packages - Feature on Demand - Windows 10 and later stuff. Which ones Do I really need - well overwhelming!

Hi,

I 'm trying to resolve an issue with WSUS installed on Server 2012. 

I've deleted WSUS for reconfiguration, but it after installation it had the sam configuration so I decided to manually remove all WSUS junk from system using recomendations from this thread http://social.technet.microsoft.com/Forums/ru-RU/winserverwsus/thread/f447e7d6-7007-4eb6-b38b-90f92525e092 

After steps described in this artile I can't install WSUS because postInstallation tasks fail with:

2013-03-19 19:23:45  Value is C:\Program Files\Update Services
2013-03-19 19:23:45  Swtching DB to multi-user mode......
2013-03-19 19:23:46  Finished setting multi-user mode
2013-03-19 19:23:46  Writing DB settings to registry...
2013-03-19 19:23:46  Marking PostInstall done for UpdateServices-WidDatabase in the registry...
2013-03-19 19:23:46  Configuring IIS...
2013-03-19 19:23:46  Start: ConfigureWebsite
2013-03-19 19:23:46  Configuring website on port 8530
2013-03-19 19:23:46  System.ComponentModel.Win32Exception (0x80004005): The system cannot find the file specified
   at System.Diagnostics.Process.StartWithShellExecuteEx(ProcessStartInfo startInfo)
   at System.Diagnostics.Process.Start(ProcessStartInfo startInfo)
   at Microsoft.UpdateServices.Administration.UseCustomWebSite.ExecuteIisCustomAction(String arguments)
   at Microsoft.UpdateServices.Administration.UseCustomWebSite.Install(Int32 portNumber)
   at Microsoft.UpdateServices.Administration.UseCustomWebSite.InstallAndConfigure(IisConfiguration& iisConfiguration, Int32 newPortNumber)
   at Microsoft.UpdateServices.Administration.PostInstall.ConfigureWebsite(Int32 portNumber)
   at Microsoft.UpdateServices.Administration.PostInstall.Run()
   at Microsoft.UpdateServices.Administration.PostInstall.Execute(String[] arguments)

I've already found this thread http://social.technet.microsoft.com/Forums/en-US/winserverwsus/thread/e1315264-c8f8-4d90-9892-330a04ac2753 but i don't have SCCM installed on this server.

Can anybody help with this problem?

Hi all,

We have a single domain, with a WSUS 3.0 Server running on W2008R2.

We have domain-joined machines running Windows 10 Pro.

Those machines get their updates normally through that WSUS server, and the rest of them (W7, W8.1) too.

We have the products "Windows 10" and "Windows 10 Feature on Demand" checked on WSUS.

We have approved ".Net 3.5 Feature on Demand for X64" and ".Net 3.5 Feature on Demand for X86" on WSUS.

Our issue is: when a user goes to Programs and Features on Windows 10, and tries to activate .Net Framework 3.5, he receives error 0x800F081F.

A network capture shows the machine is trying to contact our WSUS server for this, not Windows Update.

My questions are:

• Is there any way to allow users to install .Net Framework 3.5 on Windows 10 from WSUS?
• Does it work on W2008R2-based WSUS? Or only on W2012R2?
• Are those ".Net 3.5 Feature on Demand for XXX" updates the correct ones we have to approve to make it work?
  
• Is going to Control Panel - Programs and Features and checking .Net Framework 3.5 the correct way to install it on Windows 10 through WSUS?
• If .Net Framework 3.5 can't be deployed to Windows 10 through WSUS, how can we make it contact Windows Update for it? We have the GPO policy setting "contact Windows Update directly" set but it looks like Windows 10 ignores it (8.1 works though).

Thanks in advance, 

José

WSUS Version 6.2.9200.22167

Windows Server 2012

I have about 100 updates that are getting this error.  I'm watching the downloads through powershell with this command:

bitsadmin /list /allusers

All of the files seem to eventually download, yet this keeps persisting.

I have a single WSUS server on Windows server 2012 R2 (Build 9600), and WSUS version is 6.3.9600.17477

WSUS synchronizing with Microsoft successfully every day, but for a long time (two months) clients did not get any updates, and WSUS updates storage size did not change a bit (nothing new downloaded), 

all clients are windows 10 1607 at leat and some of them upgraded to 1703 manually because WSUS did not deliver 1703 update.

i verified that already KB3095113 and KB3159706 installed on the server.

in Event Viewer there is lot of error like this:

Content file download failed.
Reason: File cert verification failure. 
Source File: /c/msdownload/update/software/updt/2017/02/lp_3d69ce9a1dd46ae3b7bb22a217f972de0425eba2.cab 
Destination File: C:\WSUS\WsusContent\A2\3D69CE9A1DD46AE3B7BB22A217F972DE0425EBA2.cab

Question 1: how to check download progress for updates?

Question 2: how to troubleshoot wsus download?

Hello,

Facing a annoying issue for windows update on windows server 2012 Essential.Its windows update stuck on Checking for updates.

Tried below steps ..

1- Sfc /scan reported corruption which fixed by DISM /Online /Cleanup-Image /RestoreHealth .

2- Reboot server and checked again.

3- Restart windows update,BITS and Cryptogrpahic service.Nothing helped to fix it.

Please advise.

Thanks in advance...

FOR MICROSOFT:

Hello,

today after installation of  KB4480970 (automatically by Windows Update as Important) to our Windows 2008 R2 Standard Server the server stopped serve Clients by shared storage (haven't tried anything else).  The Client has issued an error Invalid handle and couldn't connect (tried on Windows 7 Pro SP1 clients with installed KB4480970 only). After uninstallation it started work again, so the problem is positively in the KB4480970. Pls stop distribute the KB4480970 to the Windows 2008 R2 Server and correct the behavior. Thank You in advance.