Quantcast
Channel: WSUS Forum
Viewing all 12331 articles
Browse latest View live

Windows update Error 0xc1900130

$
0
0

Hi,

We having an issue with one of our Windows 10 clients.

When try yo update this machine get this error:

Feature update to Windows 10, version 1909 - Error 0xc1900130

When go to the Windows updates see this message:

Your version of Windows has reached the end of support. We recommend that you update to the latest version of Windows 10 to receive the latest security features and enhancements.

I did check the version of the Windows 10 and is at 1803 and I can see that updates to the 1903 and 1909 has been failed.

Should we download and install the 1903 manually?


Shahin


WSUS Cleanup

$
0
0

I have searched for my issue but cannot find it.  The WSUS Cleanup Wizard was NOT removing old and outdated Updates.  When I took over this WSUS, there were Updates going back to 2015, for old XP and Windows 7 OS etc. There was so many updates, my hard drive was filled up.  I would run the Cleanup Wizard and zero were removed.

I did everything I could to get rid of them, I even manually deleted them.  Stopping WSUS services, going into the folder and deleting them.  Once I started WSUS back up, within a day, all these updates came back and filled my HD back up.  I also ran command lines to attempt to delete these, reset WSUS etc.

What I finally did, and do not know if this is correct or not. I Stopped the Services again and deleted all the updates in the folder.  When I started the services back up, I can see that it started downloading all these Updates again.  I went into WSUS and "Canceled Download" to all the updates.  I went to each old and outdated update, for example, ones for Windows 7 or Updates dated back in 2015, and "Disapproved" them. 

I then ran the Cleanup Wizard, and it seemed to doing what it was suppose to do, I was showing that there was files "cleaned up".  I am not having my HD fill up

My question, do we have to go in and manually "disapprove" updates that have already been applied?  If so, what is the rule of thumb, ie, any updates older than 3 months, 6 months, 1 year?  or is there a setting that I am missing in WSUS to automatically check for this?   Thank you for any advise.

WSUS Console - "Subscribed Updates" behaviour

$
0
0

How does the "subscribed updates" set for the WSUS server influence the behaviour of other functions in WSUS and on the console?

When I say "subscribed updates" I mean the products and classifications set in the WSUS options section for the WSUS server.

For example:

  • Do the auto-approval rules respect the subscription or do they operate on all updates?
  • Is it possible to set a view to scope to whatever the current subscription is?  At the moment, I have to manually align these which is a pain in the butt.

Thanks!

Multitude of issues with WSUS on Windows Server 2019

$
0
0

I have installed Windows Server 2019 on a X299 system with a 7900X CPU, 32GB DDR4-3200 ram on a 970 Evo Plus 1TB SSD. The server has 11 HDDs totaling 115TB, running a GTX 1660 Ti GPU and an 850W PSU. The Server has an ASUS 10G NIC installed, and two gigabit NICs (Generally left disabled). The server is connected to a Netgear MS510-TX Multigig switch.

I run IIS, WSUS, and Macrium Reflect. I would have thought these specs were way over the top for what the server is used for. It tends to get the hand me downs from other computers when they are upgraded.

Since installing most things are considerably slower than the Windows Server 2012 system that preceded it. Clients load web pages much slower from the server. File transfers are extremely erratic, ranging from 0 bytes to 1.1GB/s. Writes to server from a client of a (eg) 20GB file will start @ 1.0GB/s then drop to 0bytes for 45 seconds, then speed up for 5 seconds. Remote Differential Compression is disabled (I've tried both).

So, I'm not sure if the following are symptomatic of WSUS issues or more general server issues. But these are the specific issues I'm having with WSUS.

1. Slow to load. WinSvr 2012 R2: < 10 Seconds. WinSvr 2019: 15 - 20 seconds.
2. Does not retain settings. If I select columns, they revert original columns every time I run console, or change screens.
3. Clicking on an update will take up to 20 seconds to highlight and the bottom pane update.
4. If accidentally double click an update twice to view the report the console will crash to the desktop
5. When I select "Any except declined" this is not retained between sessions, or even if I go to computers, or other areas of WSUS. When I come back, it reverts to Unapproved.
6. The order of updates is not retained between sessions or when navigating to other areas of WSUS and back. (I normally like to look at the updates by Approval status, or sometimes by KB article.
7. If I click an update and I want to click another update lower down, holding shift so I can select a group, the selection follows the mouse movement and scrolls very fast. I have to click on a different update then click the original again then move to the last update I want to select while holding shift.

Server is patched to 2020-03. I generally wait a few weeks when CUs are released to let the problems sort themselves out.

I started from scratch, formatted SSD and installed again. Same issues exactly.

Are any of these known issues with WSUS? Are there any fixes? Could this be bigger than WSUS?

thank you.

Server 2012 STD R2 fails to apply Jan 2020 rollup (KB4534297)

$
0
0
Anyone else have any issues with KB4534297 (the Jan 14 2020 rollup) causing Windows Server 2012 Standard R2 to blue screen? I can apply every system update up to it and not have any problems. If I install it via Windows Update, it errors out and reverts after a reboot. If I install it manually, it boots me into system repair from which I cannot recover. I'm forced to use an older snapshot of the virtual machine and try all over again.

Thoughts?

WSUS updates at MS or locally - advantages/disadvantages

$
0
0

I am running one 2019 WSUS server (serves approx 250 PC's) with a drive dedicated for the updates - its 300 GB in size. I have run the Cleanup wizard - local Windows database cleanup tools, etc - I recently increased drive by 50 GB - it fills up in days - constantly out of space. I am thinking of changing the "Update Files" to install from MS - not stored locally. Since I have a relatively small PC population what are the pros and cons of doing this? 

Thanks, 

Milty 

 

milty60

Downstream Windows 2016 WSUS server can't update itself.

$
0
0

I have an autonomous downstream Windows 2016 WSUS server. It is getting its updates from a Windows 2008 upstream server. I that this local 2016 WSUS server is synchronized with the upstream WSUS server. I see the updates out there and see that I have to approve them.

I can't get this 2016 downstream server to run Windows Updates  When checking for updates I get the following error: We couldn't connect to the update service. We'll try again later or you can check now. If it still doesn't work, make sure you're connected to the Internet. 

This server is in an isolated network and gets it updates from the other WSUS server. I ran a PS script that shows the following:

Name            IsDefaultAUService
----                    ------------------
Windows Server Update Service    False
Windows Update    True   

WSUS version is 10.0.143.93.0. This is a new install from about a month ago and it is also a DC. 

Is there a setting I need to change?

Thanks in advance.

WSU Server configuration Windows 2012 R2 data center

$
0
0

Wsus server configured for non domain clients but clients are not receiving any updates from server.Telnet is working between clients and server through 8530 port.

http://wsusname:8530/selfupdate/iuident.cab  This url is working on the server and client i am able to download iuident.cab file.

On the client Registry updated gpo details

But http://CU-DHCP:8530/iuident.cab This url is not working in the server and client.Please help

Multiple Issues with WSUS - Clients trying to install declined updates over a year old

$
0
0

Hi,

I am having serious issues with WSUS.

I have multiple servers trying to install updates that are declined and from over a year ago, they do not successfully install, but in the Windows Update settings on each client, I can see multiple attempts to install old updates, which on the WSUS Console are DECLINED.

The update fails, but why is this happening, it is filling up the Windows Update screen with 'Failed to Install On XXXX', it is also trying to install these OLD updates at the wrong date/time, it is not on the scheduled time I have set via GPO.

The old updates do seem to be ones that were missed in previous months, but this shouldn't occur when the updates are set to decline, and this never happened when the clients were installing from MS.

Approved updates are installing at the correct time.

Has anyone seen this before?

Windows 10 update detection frequency not following Group Policy

$
0
0

Ever since Windows 10 v1803, most of my clients check in with the WSUS server and install updates fine, but I've noticed that some of my clients randomly do not always adhere to my Group Policy "Automatic Updates detection frequency" setting.  I do understand the actual check-in time can be the interval +0-4 hours, but I can have some machines that are continuously on the network, and may not check in for up to a week.  If I force update detection via the GUI or through Powershell, they check in just fine.  That same client might check in fine for the next few weeks, and then all of the sudden not check in for a few days.  

We do still have a few Windows 7 devices, and they function exactly as I would expect.  They're in the same OU as the Windows 10 machines, and are running the same WSUS Group Policy.  This isn't a major issue, but I'm just trying to nail this down to see if maybe there is a newer policy setting for Windows 10 that I do not have applied.  Any help would be greatly appreciated.  Thanks!

A few notes as well, the WSUS server is Windows Server 2012 R2 and fully-patched, and we're running the latest administrative templates.

WSUS CleanUp Error

$
0
0

When trying to run the Server CleanUp Wizard, when checking ONLY "Unused updates and update revisions" we keep getting the following error "Error: Database Error An error occurred when trying to perform a database operation. This can happen if the database is very busy, if the database service is stopped, if the connection to the database is lost, or if the Post- Installation task is not completed successfully. Please contact your system administrator if the problem persists."

I have already reset the server node and tried again, still keep getting the same error. On the other options to check off, each have gone through successfully. Only the specified box Unused updates and update revisions" keeps giving me that error message. Any help would be greatly appreciated!

 

which the best policy for wsus

$
0
0

hello ,

we did a pilot of a list of servers in 2012 and 2016 adn i want to check this pilot after updates done 

how can i do my check? just to connect to server on RDP and if it's ok i tell i will approve these updates in production ?i'm confusing how can i do my check .

second point , is it a good idea to approve security updates automatically in production ?

Regards


Windows 10 clients not contacting WSUS every hour per GPO

$
0
0

I'm not sure if this is a GPO issue\Win10\WSUS....I'll start here. The actual process of delivering patches to clients from WSUS works fine. The issue is the "Last Contact" time in WSUS.

I have 1 WSUS server, it is fully patched (Server 2012 R2). Single forest and domain. DC's are 2016 with up-to-date admx files. Our GPO tells the clients to contact the WSUS server every hour. The Windows 7 clients (we have very few left) contact WSUS correctly. The Windows 10 clients (we only have 1809 and 1909) randomly contact the WSUS server. They all do it at least a few times a day...none do it every hour like they are supposed to according to the GPO, not even close. It doesn't matter if the machine is a brand new build from SCCM or an in-place upgrade from Windows 7 or 1809. I have gone through the process of deleting the contents of the Windows\Software Distribution folder even though the machines are brand new in some cases, so that can be ruled out. The machines are getting the GPO, I've run a gpresults and it comes back correctly on each machine I look at. Has anyone else run into this?

I regularly "clean" the WSUS database.

Jason

Security Rollup (KB4541509) fails to install with error 0x800F0922

$
0
0

On one of our Windows Server 2012 R2 standard virtual servers we are getting a failure when installing the following update:  "2020-03 Security Monthly Quality Rollup for Windows Server 2012 R2 for x64-based Systems (KB4541509)"  

The update will install, but when the server restarts we get the following error message when the server comes back up:  

"We couldn't complete the updates; Undoing changes; Don't turn off your computer"

The general error message in the event log was:

"Event 20, WindowsUpdateClient-  Installation Failure:  Windows failed to install the following update with error 0x800F0922:  2020-03 Security Monthly Quality Rollup for Windows Server 2012 R2 for x64-based Systems (KB4541309)."

The detailed error message in the event log was:

"errorCode- 0x800f0922

updateTitle- 2020-03 Security Monthly Quality Rollup for Windows Server 2012 R2 for x64-based Systems (KB4541509"

updateGuid- {20C43E88-7DCE-4FFE-90F2-66F5047EC347}

updateRevisionNumber- 200

serviceGuid- {9482F4B4-E343-43B6-B170-9A65BC822C77}"

This issue occurs on our production Citrix server, so I cannot just delete the VM, and create a new one.  (Eventually we will do this when we upgrade to Server 2016, but for now I need to resolve this issue)

I have done the following troubleshooting steps on a clone of this server:

STEP #1:  Performed the following commands in elevated command prompt:  (FAILED)

 

net stop wuauserv

net stop cryptSvc

net stop bits

net stop msiserver

 

ren C:\\Windows\\SoftwareDistribution SoftwareDistribution.old

ren C:\\Windows\\System32\\catroot2 Catroot2.old

 

net start wuauserv

net start cryptSvc

net start bits

net start msiserver

STEP #2:  Performed the following:  (FAILED)

 

DISM /Online /Cleanup-Image /RestoreHealth

STEP #3:  Performed the following:  (FAILED)

Installed the update through elevated PowerShell

STEP #4:  Performed the following:  (FAILED)

Uninstalled all non Microsoft programs, and uninstalled all Microsoft updates going back to mid 2019.  Then I rebooted, and re-installed all the updates up to the one that was failing.

STEP #5:  Performed the following:  (FAILED)

Ran the System File Checker, and deleted the Windows update catalog folder; allowed Windows update to recreate that folder.  

Has anyone else had this problem? 

(Please only introduce new ideas, not the generic answers you commonly see on the technical forums where you can tell the person did not actually read the entire post they are replying to)  

WSUS Restart GPO

$
0
0

Hello,

I'm setting up a new WSUS server for my organization and trying to figure out the best restart option for my client machines.

All our client machines are windows 10 1803 and this is what I want to do.

Install the patch

After the patch installation show a restart prompt with snooze or pick a time option

Restart the machine based on the inputs given by the user in the above.

I have tried the below GPOs but none of them seems working, could you please let me know what is wrong in my configurations.

Specify deadlines for automatic updates and restarts
Configure Auto-restart warning notification schedule for updates

Specify engaged restart transition and notification schedule for updates

Thanks in advance


All Clients fail to detect updates from WSUS on Server 2016

$
0
0

I need your assistance.

I installed and configured WSUS on brand new Windows Server 2016. All clients are reporting to the WSUS and they show the number of patches that are missing. All of the are approved for installation. But when I detect from client side, clients show that they don't need any updates. Please assist.

Approve Updates In USS and DSS

$
0
0

Hi,

I am in the middle of deploying a distributed management WSUS in win server 2019.

My upstream wsus will be in DMZ and downstream wsus in trusted network.

My USS acted like a repository and all my end points are connected to DSS which is in autonomous mode.

Do i have to approve the update in both USS and DSS or just DSS?

Thanks.

Windows 10 Clients Updates Problem

$
0
0

Hello,i have an environment with WSUS and mixed Windows 10 Versions clients.

When a client selects check for updates normally receiving updates on the WSUS.

When a client selects check online normally receiving updates through Internet.

If a user is not located at the office(Physically or through VPN) and selects check for updates it normally trying to contact the WSUS.

The problem is that the option check online is missing for some time and only the retry option is available.

Is this the default behavior or something can be changed?

Thank you!


Client-Side Targeting Best Practices in Large Company

$
0
0

I am working on our WSUS installation and am looking for advice on client-side targeting.  We have 100's of OU's so it would be difficult to attach GPO to OU's.   

Our goals include:

Segregate workstations from servers. (We push workstation updates down.  Notify only for servers)

Ensure no new computers are left out of WSUS (We currently apply workstation policy at domain then block for servers)

Prevent servers from being accidentally pushed into the workstations group on WSUS (Because we apply workstation policy at domain level)

I am considering a security group-trimmed GPO for workstations and or WMI to place workstations and servers in the proper groups.

I would be grateful for some guidance.

1903 Cumulative Updates

$
0
0

Hello,

My WSUS server is pulling down monthly cumulative updates for 1709, 1803 & 1809, but not for 1903. We have a few laptops in our enterprise that are running 1903 which need monthly updates. In the Products and Classification settings under Windows I have Microsoft Edge and Windows 10 checked. is there something else I need to do to pull down updates for 1903?


Hank Vare

Viewing all 12331 articles
Browse latest View live


<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>