Hi all,
I have a problem with WSUS that is driving me to insanity. I will try my best to explain here.
The setup is Windows Server 2012, running WSUS 6.2.9200.16384 deplying updates to Windows Server 2012 and Windows Server 2008 R2. Each server reports into WSUS once per hour and is configured to download approved updates. We then install and reboot manually due to the nature of the servers (application servers that need rebooted in a specific order).
After getting updates from Microsoft, I leave the servers for 24 hours to report into WSUS. The following day, I approve all needed updates and the day after that I install and reboot.
Following this activity, I check the WSUS console, and assuming there is no errors, all servers are not at 100% patch level. i.e. Every patch they need, is installed.
However, when I come back in the day after, I see that a handful of servers have slipped down to 99%, and they reporting as needing 1 more update. Most recently, that updates has been kb2822241 (an old patch from April 2013 I believe). Obviously this patch needs applied so I install it on the handful of servers and after an hour or so, my patch level for all servers are back up to 100%
But this continues to happen. Two days later I will check WSUS and a handful ofdifferent servers are now requesting this patch and again I have to patch these servers.
It is worth noting that patch does not need to be approved. It was approved at the beginning of the cycle of patching.
Does anyone know why these patches are trickling out instead of just applying as normal with the rest of the patches?
Any advice is much appreciated.
Wayne.