some windows 10 1607 build systems not getting updates from WSUS or SCCM , all other systems are getting updates from WSUS even Windows 10 1703 build is getting updates.
But it is showing as compliant on SCCM\WSUS console.
I use Group Policy to manage about 40 systems across a few remote sites - Everything has been working well, until a few weeks ago (but only just noticed).
Mix of Windows 7 (which do not have any issues) and Windows 10 1709, 1803 + 1809.
Noticed that updates were getting distributed to W10 systems, but not installing - Will sit on users system saying 'Pending Install'. Remembered I hadn't updated any of the admin files for GP, so updated to 1809 and has replicated to my other 2 DCs - all
OK.
Updates still wouldn't install - However, If I click 'Allow updates to be downloaded automatically over metered connections' locally, they install immediately. So, I added that to the GP and enabled. Forced update, etc. but nothing - Still
shows Pending Install even though GP shows this as greyed out and enabled.
If I leave it on, no updates install. If I turn it off, no updates install. If I turn it off, then on they install. So, toggling this policy manually works, but applying it fully doesn't.
Active Hours are set to 1 hour period (8am -9am) to take it out of the equation.
Has anybody come across this? Any advice greatly received.
Thanks,
Darren.
EDIT - Should have stated, they are all Windows 10 Enterprise.
We're using WUFB to defer security patches and feature updates automatically and WSUS for anything that's not delivered by WUFB.
Despite this we're seeing significant numbers of clients showing in WSUS as needing 1903 and recent security updates. Frustratingly some clients are working correctly and are showing in WSUS as needing no updates despite having identical GPOs etc. applied.
Any suggestions on troubleshooting why clients aren't going direct to Microsoft? RSOP is showing the right GPOs applied. Check for updates works fine.
Searching the internet for suggestions hasn't been very fruitful as all I find are people complaining about the opposite problem with clients talking to WUFB when they shouldn't be.
I have a WSUS infrastructure in place and use GPO to manage the settings and control which clients talk to what servers, etc.
I am not preventing Windows clients from downloading drivers in WSUS through group policy.
I have not added the Drivers Classification to WSUS either.
Is it still possible for the Windows 10 Clients to get the Drivers from Microsoft? Or do I have to add the Drivers classification to download updated drivers?
Thanks!
Portland Public Schools / Systems Administrator II
I am planning to setup my WSUS server to not store updates files locally
-"Do not store update files locally;computers install from MS update".
I am curious if I will still need to setup approval rules for my groups in WSUS or will the machines download whatever is available via Windows updates at that given time?
Overall, I am looking to use WSUS for reporting only and possibly marking a update for removal.
I want the client's to act as a stand alone machine that was never pointed to a WSUS server and getting updates only from Windows Update.
I tried to install the windows updates KB4499164,KB4499175,KB4493472 on windows server 2008 R2 SP1 64 bit and encountered below issue.
error message in Windowsupdate .log
2019-05-1619:00:40:1245321a20Agent * {30EA442C-48C3-4B98-B79B-8D6B4D8CDC3D}.202
2019-05-1619:00:40:9205321a20AgentWARNING: failed to calculate prior restore point time with error 0x80070002; setting restore point
2019-05-1619:00:40:9205321a20AgentWARNING: LoadLibrary failed for srclient.dll with hr:8007007e
2019-05-1619:00:41:3105321a20DnldMgrPreparing update for install, updateId = {E509DBC4-C97F-44CA-A14D-56156E55394E}.200.
2019-05-1619:04:15:370598023a8HandlerFATAL: CBS called Error with 0x80070001,
2019-05-1619:04:20:284598020b0HandlerFATAL: Completed install of CBS update with type=0, requiresReboot=0, installerError=1, hr=0x80070001
Below are the basic troubleshooting steps that I have performed but no luck.Requesting to help with the fix.
1)sfc /scannow
2)Reset Windows Update components Manually
3)Renamed the softwareDistibution folder
When ever new updates emerge, they stuck at pending install, forever (I usually don't turn off my PC at all for days). In the mean time, my system start to be hogged by a process called the svhcost.exe (netsvc-p) which takes half my CPU and my disk
activity alike.
Windows 10 Pro 1803 OS build 17134.472 under domain environment. Update is automatically approved by WSUS.
I have a PC at home which auto updates just fine but most computer in my domain that are 1803, has this hiccup.
In the mean time the system get laggy coz all the CPU eaten up. The settings windows is ridiculously slow in response and often shows up white. Until I finally I found out that I can go to "Advanced options" and flip the option "Allow
metered network". After I flip the options, update start to show 0% and then start installing.
Mind this: I need to FLIP this option every time new updates come and the system is acting up. Letting it stay on or off just do not make a different.
I keep getting error 8024401f on every server I try to install updates on. The updates appear to be reaching the machines but fail to properly install. I've searched and searched but still have not found a solution. I've used a troubleshooting tool and
it says "InternalServerError: Incorrect windows update server or IIS configuration. Also, the next error is, iuident.cab not found: Omitting required port suffix on URL to access WSUS installed to port 8530 or resource is unreachable. I have no idea how
to fix this. Any Help??
Hi everyone. I got problem with my wsus (win2012R2) wsus version 6.3.9600.18838 I noticed few days ago that when i click all computers in my wsus, console start crush and gets error node reset...
But when i use "search" .Then These computers are visible except one. When i serch for this one computer console always crush.
The problem is that i cannot remove this problematic computer from wsus because of crush. Any sugesstions?
How to solve this case? Or maybe a way to remove this computer from wsus DB ?
I have good number of Windows 10 1903 clients trying to run windows update. They can get everything I've approved in WSUS except for the Servicing Stack Update for Windows 10 Version 1903 for x64-based Systems. Each time it stalls
at "Downloading - 0%". Every client, Every time.
So, I'm thinking there's something going on with my WSUS box.
The only work around is going to each box and installing the update manually that I get from Windows Catalog.
I have a few servers All (2016 standard) that have no access to internet PCI rules, I need them to access a local 2016 WSUS server to get their updates.All client servers all register into WSUS server, but all approved updates do not download to the assigned serves from the WSUS server. I have found an item where someone had the exact same issue. In the post it was said to download a few updates
and make a few changes to Group policy and all will work.
I have downloaded the following standalone updates
kb4103720 and kb4462928
kb4103720 without issue, but the kb4462928 will not install on any of them.
Error when running kb4462928:
Windows Update Standalone Installer
The Update is not applicable to your computer
Here is the download link that I am using - have re-downloaded cumulative update for windows server 2016 for x64 based systems. I even tries DISM install
of update..
Few days ago I uninstalled my WSUS service on Windows Server 2012, recently I installed again the service on the same server but appears an error after installation. The massage is:
2019-05-30 11:34:31 Postinstall started
2019-05-30 11:34:31 Detected role services: Api, UI, WidDatabase, Services
2019-05-30 11:34:31 Start: LoadSettingsFromXml
2019-05- 30 11:34:31 Start: GetConfigValue with filename = UpdateServices-Services.xml item = ContentLocal
2019-05-30 11:34:31 Value is true
2019-05-30 11:34:31 End: GetConfigValue
2019-05- 30 11:34:31 Start: GetConfigValue with filename = UpdateServices-Services.xml item = ContentDirectory
2019-05-30 11:34:31 Config file did not contain a value "ContentDirectory"
2019-05-30 11:34:31 Microsoft.UpdateServices.Administration.CommandException: A required configuration value was not found in the system. This is usually because WSUS is installed through PowerShell and a configuration file is not specified. Read the WSUS administration
article using PowerShell in the TechNet Library (http://go.microsoft.com/fwlink/?LinkId=235499) for more information on the recommended steps to perform the installation. ¢ n of WSUS using PowerShell.
in Microsoft.UpdateServices.Administration.PostInstall.GetConfigValue (String filename, String item)
in Microsoft.UpdateServices.Administration.PostInstall.LoadSettingsFromXml ()
in Microsoft.UpdateServices.Administration.PostInstall.Execute (String [] arguments)
Unrecoverable error: I do not know found a required configuration value in the system. This is usually because WSUS is installed through PowerShell and a configuration file is not specified. Read the WSUS administration article using PowerShell in the TechNet
Library (http://go.microsoft.com/fwlink/?LinkId=235499) for more information on the recommended steps to perform the installation of WSUS using PowerShell.
I have installed kb4500331 (Windows 2003 - patches for severe security vulnerabilities) in couple of our 2003 machine. But I don't see that listed in add/remove programs. how do I uninstall in case if I have to?