Quantcast
Channel: WSUS Forum
Viewing all 12331 articles
Browse latest View live

Is there a way to see when a Windows computer is scheduled to install updates and restart?

$
0
0

We use WSUS to update our Windows computers. We configure Windows 10 to install any approved updates at 2:00 AM.  We configure Windows to automatically restart to complete the update install as long as nobody is logged into Windows at that time.  If someone is logged in at 2:00 AM, then Windows will NOT restart and instead rely on the user to restart at a time of their choosing.  If the user doesnt restart in seven days, Windows will auto-restart regardless of whether the user is logged in or not.

When i am reviewing WSUS to see which computers are not fully updated, i would like to be able to tell when Windows plans to restart the OS to complete updates.  Is that possible?  Is there a way to see when Windows is intending to restart to finish updates?  and can i do that without having to actually sign on to the Windows computer? Can i check it remotely from the event viewer or registry?  is there a setting/event log/WMI call that shows "Windows will restart on <date> and <time> to complete updates"?


SQL Server Cumulative Updates not showing up as needed in WSUS for SQL Servers that dont already have CUs installed.

$
0
0
We use WSUS to deploy SQL Server Cumulative Updates for our SQL Servers.  If a SQL Server is up to date with the latest service pack AND the latest cumulative update, the next CU that is downloaded and approved in WSUS will show up as needed on that server and will install as scheduled.  If we build a new SQL Server from scratch and apply the latest Service Pack but dont install any CUs, WSUS will not show the next CU released, downloaded and approved as needed on that server.  For example, we have SQL Server 2016 SP2 installed on several servers.  All but one of the servers is at SQL Server 2016 SP2 CU12.  CU13 was released on May 28th.  WSUS says CU13 is needed on all the servers that have CU12, but WSUS doesn't think CU13 is needed for the one server that is at SQL Server 2016 SP2 (no cumulative updates installed).  Why isnt CU13 being detected as applicable for a SQL Server 2016 SP2 server?   We have other examples like this as well (e.g. SQL Server 2017).  It seems like we have to manually install at least one cumulative update before WSUS will detect that future CUs are needed.

WSUS Computers cannot change membership

$
0
0
I have setup WSUS, all computers are under 'Unassigned Computers' (default), I have created new groups, but I am unable to change the membersip of the computers when right clickong the required computer. The selection is 'greyed out'......and ideas????

ScheduledInstallThirdWeek ran in 2nd week in june 2020

$
0
0

Hi,

we configured Windowsupdates with GPO to install on  Saturday in the 3rdweek of month at a specified time.
But it ran last saturday already, so i removed some updates on a test-server added it to the same gpo in securityfiltering, rebooted it twice, checked rsop.msc and it ran again this saturday which would be correct.

(ScheduledInstallThirdWeek =1)

OSes: 2012R2/2016

Has anyone else experienced issues with these settings? In the description it says they were introduced with windows 10 1709. Server 2012R2 would be comparable to Windows 8.1 but the setting is available.

A case at MS is also opened but i´m still waiting for feedback.

Need to add windows updated to a WSUS that has no internect connection.

$
0
0

I have a network that is isolated from the internet

Domain controller (Server 2016) and ~ 80 servers  (2012R2,2016) and 250 workstations (Win10, Win 7)

I need to add selected updated manually to the WSUS.

Please direct me to the best method.

Raf

Update Win10 2004 is not installed without the Internet

$
0
0

Greetings!

Faced the following problem. There is a corporate WSUS server on which the win 10 2004 update is approved. This update arrives on client machines, but is successfully installed only on those that have Internet access. All machines that have the Internet block in the organization on the border firewall can't update with the error 80070057.

Log from the client machine:

Installer completed. Process return code = 0x80070057, hresult = 0x80070057, callback pending = False
Handler Handler: Setup 360 returned unknown error 80070057 forstate 5, resting state to Unknown
Handler State changed. war: Setup 360_CompatToolPhase1(5), now: <invalid>(0)
Handler Saved state. m_dwState: <invalid>(0)
Handler *FAILED* [80070057] Method failed [CUHWinSetupHandler::Install:763]
Handler * END * Windows Setup Install
Agent *FAILED* [80070057] Method failed [C Agent Update Manager::InstallUpdate:11561]

As soon as we give the machine access to the Internet, the update is installed immediately.

Can you tell me why WSUS can't provide update distribution on its own over a local network? How to make that the machines do not download anything from the Internet, but are completely updated from the internal WSUS server. There are no problems with all other updates - WSUS installs them independently.

0x80070057 with KB4534726 or KB4532692

$
0
0

Hello,

I am trying to update a lot of Windows 10 Systems with older builds to 1903.

With the updates KB4534726 or KB4532692 approved the installation fails with error 0x80070057.

The clients access the internet via a proxy. The proxy is configured in Internet Explorer and also as a winhttp proxy.

Almost all accesses go through the proxy. But right before the installation halts  setuphost.exe tries to access the IP addresses 205.185.216.10 or 205.185.216.42 directly on Port 80 which is blocked by our firewall.

After that the installation stops with error 0x80070057

When the firewall is open this request works and the update continues to install.

Am I missing something? Why does this request not go through the proxy?

WSUS upgrade to Server 2016

$
0
0

I am in the process of upgrading from a Server 2008r2 WSUS to Server 2016 WSUS server.

After watching videos and preparing I installed WSUS and configured it on the Server 2016 Server using a temporary name and ip.  Then I renamed and changed the ip on the Server 2008r2 Server and used the original name and ip for the Server 2016 server.  I am using "client side targeting" now with the Server 2016 WSUS.  I was not using it on the 2008r2 WSUS server.  That is the only difference or change that I made going from the old to the new.

Issue:  my clients are not showing up in my WSUS console.  I have rebooted many of the machines and have given it some time (3 days) but no clients are showing up.  I have also rebooted the server and closed and re-opened the WSUS console.  Still no clients show up.  I am not sure what I am doing wrong. 

I have not used any diagnostics tools yet.  Thanks for the help.


Reinstalling WSUS fails miserably

$
0
0

I have an 2012 R2 SCCM server that was configured for Windows Updates.  We made an attempt to use https and PKI certs. There were dns issues that caused others issues, so we reverted everything back to http.  Things were good for a week when we attempted to enable PKI certs one more time.  Everything looked great and was working until I realized that there was an issue with clients reporting back.  I reverted everything again thinking I would try another time.  I then realized that something was wrong with WSUS.  In an failed troubleshooting attempt, I uninstalled the WSUS role, deleted the WSUS IIS entry and application pool, and the other files per a Google recommendation.  I needed to log into the SSMS using an sa account to delete the SUSDB.  

Once I verified everything was gone, I figured I'd just start fresh and reinstall WSUS.  Everytime, the post installation update fails.  I have uninstalled .NET 4.8 and rebooted countless times only to have the process continually fail.  The farthest I got was the SUSDB finally got reinstalled during the post installation tasks, but then did not complete with an error that says:   System.InvalidOperationException: Security groups have not been configured

I am trying to open a ticket with MSFT, but it is taking a while so I figured I would ask here.  Be happy to post whatever is needed.  


Matt Dillon

Massive upgrade to Windows 10 1909

$
0
0

Hi all,
a company finally decided to use Windows 10 1909.
Some laptop inside company are 1903 at the moment.

In this company there is a WSUS Server (Windows Server 2016 + WSUS Role).

I would spread this upgrade from 1903 to 1909 using WSUS.

I have done these steps:

1) I have checked in "Products and Classifications" two options: Windows 10, version 1903 and later and Windows 10

2) After I have searched under "Updates > All Updates" the keyword1909 and I have approved for "Clients"
"Feature update to Windows 10 (business editions), version 1909...". I have done the same forConsumer Edition.

Finally I have seen under "Updates > All Updates" that there are option that I have confirmed in the before steps.
I have checked on some laptop,with Windows 10 1903, but they did not get upgrade to Windows 10 1909.

I have lost some configuration?

Thanks!
Federico

Unable to Download windows 10 security updates (Retry Download)

$
0
0

Hi Guys,

We recently installed WSUS on Windows server 2012 R2, but are unable to download security updates which we approved and it keeps showing the rex cross (X) and retry download. We only need windows 10 updates for our end user machines. Can any one please help us with the detailed procedure how to update our windows 10 machines and other servers through WSUS.

Note: We have not yet activated our server 2012 R2 license, is that the reason why we are unable to get the updates? please guide?

Many Thanks

Client to Fallback to Microsoft Update

$
0
0
Is it possible to configure WSUS client to fallback when WSUS is unreachable in the group policy? Some of remote users computers are unable to report to WSUS on the VPN.

Windows Server 2012 R2 - SSU

$
0
0

Hi,

The SSU from last November was approved on my WSUS but I don't see it when I'm checking for new updates on my servers.

In the reportingevents.log from softwaredistribution foler, it is writed 2 updates detected but I only can see one of them.

I already renamed this folder and restart wuauserv service but it's not better.

Any idea?

Thanks.

T.

SSU update using WSUS not reflecting under Windows Update List

$
0
0

I am facing problem while I approve June 2020 monthly rollup along with remaining patches and SSU Update. I have noticed that if I approved Monthly rollup then SSU update is stopped reflecting in Windows update list. I have selected option 2 to select for download and install. As of now I am facing this problem in windows 2012 R2.

If I remove Monthly Rollup of June 2020 for windows 2012 R2, SSU update of 06-2020 KB4562253 start reporting under Windows Update and I can select it for download and install.

I have seen one forum which explain to approve this update first and then approve another updates but it wont help me because I have to finish patching in defined time line. Even I can not select day -1 as deadline, else it will start installing this KB forcefully without planned downtime / maintenance window.

Is there any fix required on windows 2012 R2?

As per log it is reflecting under total count but in GUI -> Control Panel -> Windows Update SSU is not listed in pending list.

Update Windows 10 from 1909 to 2004 version

$
0
0

Hi Everyone,

Could you help me please, I have a WSUS server and I need to patch my workstations (W10 version 1909) to latest version 2004, I try to import (KB4567523) directly but still my workstation doesn't install latest version

thank you for your help,


Is there a way to see when a Windows computer is scheduled to install updates and restart?

$
0
0

We use WSUS to update our Windows computers. We configure Windows 10 to install any approved updates at 2:00 AM.  We configure Windows to automatically restart to complete the update install as long as nobody is logged into Windows at that time.  If someone is logged in at 2:00 AM, then Windows will NOT restart and instead rely on the user to restart at a time of their choosing.  If the user doesnt restart in seven days, Windows will auto-restart regardless of whether the user is logged in or not.

When i am reviewing WSUS to see which computers are not fully updated, i would like to be able to tell when Windows plans to restart the OS to complete updates.  Is that possible?  Is there a way to see when Windows is intending to restart to finish updates?  and can i do that without having to actually sign on to the Windows computer? Can i check it remotely from the event viewer or registry?  is there a setting/event log/WMI call that shows "Windows will restart on <date> and <time> to complete updates"?

How to get Windows Server 2008 patches (not 2008 R2)

$
0
0

Hi, may I know if it is still feasible to download Windows Server 2008 patches (not 2008 R2) from Microsoft?  I am searching for Windows6.0-KB975925-x64.msu which was released before the end-of-support date of Windows Server 2008.  The official download link http://support.microsoft.com/kb/975925 is no longer available.

Thanks.

Windows 10 configured to install updates at midnight. It sees that it needs updates, but never initiates the installation.

$
0
0

I have a WSUS server and a Windows 10 client computer that is configured to get its updates from the WSUS server. I have the 'Configure Automatic Updates' policy set to '4 - Auto download and schedule the install' with the time set to midnight (00:00).  

When i look at WSUS, it sees the Windows 10 client and it sees that it needs two updates.  When i log into the Windows 10 client, i check 'Windows Updates' and it also shows that it needs those same two updates.  But those updates never install.  It just sits there endlessly waiting for someone to click the Install Now button.  Windows Updates is showing me that 'some settings are managed by your organization' and when i view those settings, they look exactly like my group policies.

What is preventing the Windows 10 client from scheduling the install for midnight tonight?  Where can i check to see if it is even scheduled to install at all?  

Here are all the policies i have set for this one client (i have other Windows 10 clients and Windows Server servers that use this WSUS server.  The servers will install updates as scheduled, but the clients won't, so i'm troubleshooting with this one Windows 10 client and this one set of policies.)


*FAILED* [80004001] ISusInternal:: IsImmediateInstallPreferred

$
0
0

Does anyone know what this error means in the Windows Updates logs?  it occurs right about an inventory collection.

*FAILED* [80004001] ISusInternal:: IsImmediateInstallPreferred

Since Windows 10 2004, updates from WSUS are not installed automatically, GPO is ignored

$
0
0

Hi

Since our clients are on Windows 10 2004, updates from WSUS are not installed automatically anymore. There is no notification, no nothing. The updates are listed in the WU dialog and are waiting for it to be manually installed.

We have configured a GPO to automatically download and install (option 4) and inform the user about a needed reboot, allow 5 days for it.

This worked a treat up until we deployed W10 2004. I have updated to the latest admx on the DC and there are only new settings for Server 2016.

What's wrong?

McL

Viewing all 12331 articles
Browse latest View live


<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>