SOLVED
Home

Problems with WSUS and recent Windows 10 CU updates

%3CLINGO-SUB%20id%3D%22lingo-sub-35588%22%20slang%3D%22en-US%22%3EProblems%20with%20WSUS%20and%20recent%20Windows%2010%20CU%20updates%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-35588%22%20slang%3D%22en-US%22%3E%3CP%3EIt%20seems%20realted%20to%20SCOM%20crashesreported%20here%20%3CA%20href%3D%22https%3A%2F%2Fblogs.technet.microsoft.com%2Fgermanageability%2F2016%2F10%2F17%2Foctober-2016-windows-patch-kb3192392-might-cause-scom-2012r2-console-to-crash%2F%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Fblogs.technet.microsoft.com%2Fgermanageability%2F2016%2F10%2F17%2Foctober-2016-windows-patch-kb3192392-might-cause-scom-2012r2-console-to-crash%2F%3C%2FA%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EBut%20recently%20WSUS%20is%20having%20problems%20replying%20to%20update%20check%20from%20Windows%2010%20clients%3A%3C%2FP%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Fsocial.technet.microsoft.com%2FForums%2Fen-US%2F1e93872d-7dd4-4139-9537-ce40c92305f2%2Fwsus-problem-machines-timing-out-to-reach-server-0x8024401c%3Fforum%3Dwinserverwsus%26amp%3Bprof%3Drequired%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Fsocial.technet.microsoft.com%2FForums%2Fen-US%2F1e93872d-7dd4-4139-9537-ce40c92305f2%2Fwsus-problem-machines-timing-out-to-reach-server-0x8024401c%3Fforum%3Dwinserverwsus%26amp%3Bprof%3Drequired%3C%2FA%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EIt%20works%20fine%20until%20you%20synchronize%20Windows%2010%20product%20(just%20Security%20Updates).%20Then%20Win10%20clients%20report%200x8024401c%20error%20when%20checking%20for%20updates%20on%20WSUS%20and%20IIS%20on%20WSUS%20is%20reporting%20time%20outs%20and%20memory%20issues%20with%20WsusPool.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-323660%22%20slang%3D%22en-US%22%3ERe%3A%20Problems%20with%20WSUS%20and%20recent%20Windows%2010%20CU%20updates%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-323660%22%20slang%3D%22en-US%22%3EClientWebService%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-323628%22%20slang%3D%22en-US%22%3ERe%3A%20Problems%20with%20WSUS%20and%20recent%20Windows%2010%20CU%20updates%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-323628%22%20slang%3D%22en-US%22%3E%3CP%3EC%3A%5CProgram%20Files%5CUpdate%20Services%5CWebServices%5CReportingWebService%5CWeb.config%3C%2FP%3E%3CP%3Eor%3CBR%20%2F%3EC%3A%5CProgram%20Files%5CUpdate%20Services%5CWebServices%5CServerSyncWebService%5CWeb.config%3C%2FP%3E%3CP%3Eor%3C%2FP%3E%3CP%3EC%3A%5CProgram%20Files%5CUpdate%20Services%5CWebServices%5CClientWebService%3CSPAN%3E%5CWeb.config%3C%2FSPAN%3E%3C%2FP%3E%3CP%3E%3F%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-292054%22%20slang%3D%22en-US%22%3ERe%3A%20Problems%20with%20WSUS%20and%20recent%20Windows%2010%20CU%20updates%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-292054%22%20slang%3D%22en-US%22%3E%3CP%3EDo%20you%20mean%20with%201607%20version%20of%20Windows%2010%20or%20newer%3F%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-291975%22%20slang%3D%22en-US%22%3ERe%3A%20Problems%20with%20WSUS%20and%20recent%20Windows%2010%20CU%20updates%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-291975%22%20slang%3D%22en-US%22%3E%3CP%3EI%20have%20similar%20issues%20on%202016%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-146832%22%20slang%3D%22en-US%22%3ERe%3A%20Problems%20with%20WSUS%20and%20recent%20Windows%2010%20CU%20updates%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-146832%22%20slang%3D%22en-US%22%3E%3CP%3ENo%2C%20on%20Windows%20Server%202012%20R2.%20Btw%2C%20i%20think%20this%20issue%20is%20probably%20only%20with%20fresh%201607%20installs.%20We%20are%20currently%20installing%201703%20on%20new%20machines%20(will%20switch%20to%20fresh%201709%20or%20even%201803%20this%20year).%20But%20i%20haven't%20reverted%20this%20changes%20on%20the%20WSUS%20server%2C%20so%20i%20can't%20say%20for%20sure.%20Have%20too%20many%20issues%20with%20Windows%2010%20and%20WSUS%20already%20to%20bring%20back%20this%20older%20issue..%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-146764%22%20slang%3D%22en-US%22%3ERe%3A%20Problems%20with%20WSUS%20and%20recent%20Windows%2010%20CU%20updates%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-146764%22%20slang%3D%22en-US%22%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CBLOCKQUOTE%3E%3CHR%20%2F%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F33735%22%20target%3D%22_blank%22%3E%40Oleg%20K%3C%2FA%3E%20wrote%3A%3CBR%20%2F%3E%3CP%3EHave%20made%20additional%20changes%3A%20WsusPool%2C%20made%20Private%20Memory%20Limit%20(KB)%20to%20zero%20(not%20limited)%20and%20edited%20web.config%20for%20WSUS%3C%2FP%3E%0A%3CP%3Echanged%3A%20%3CSPAN%20class%3D%22bigger%22%3E%3CHTTPRUNTIME%20maxrequestlength%3D%22%26quot%3B4096%26quot%3B%22%3E%3C%2FHTTPRUNTIME%3E%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%3Eto%20%3CSPAN%20class%3D%22bigger%22%3E%3CHTTPRUNTIME%20maxrequestlength%3D%22%26quot%3B204800%26quot%3B%22%20executiontimeout%3D%22%26quot%3B7200%26quot%3B%2F%22%3E%3C%2FHTTPRUNTIME%3E%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EThis%20helps%20for%20the%20already%20updated%20from%20Internet%20machines.%20But%20fresh%201607%20build%20still%20shows%20the%20same%20problem.%20Will%20see%20how%20it%20goes.%3C%2FP%3E%0A%3CHR%20%2F%3E%3C%2FBLOCKQUOTE%3E%0A%3CP%3EWas%20this%20happening%20on%20a%202016%20WSUS%20server%3F%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-42022%22%20slang%3D%22en-US%22%3ERe%3A%20Problems%20with%20WSUS%20and%20recent%20Windows%2010%20CU%20updates%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-42022%22%20slang%3D%22en-US%22%3E%3CP%3EMy%20standalone%20Windows%2010%20PRO%20computer%20has%20downloaded%20the%20updates%20from%20Microsoft%20-%20Internet%20directly.%20When%20it%20try%20to%20install%20the%20updates%20of%20KB3211320%20and%20KB3213986%20it%20gives%26nbsp%3Berror%20below.%20I%20even%20downloaded%20them%26nbsp%3Bas%20standalone%20packages%2C%20still%20same%20issue.%20any%20idea.%20%3F%20appreciate%20any%20help%20on%20this%20please.%20Thanks.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%22There%20were%20some%20problems%20installing%20updates%2C%20but%20we'll%20try%20again%20later.%20If%20you%20keep%20seeing%20this%20and%20want%20to%20search%20the%20web%20or%20contact%20support%20for%20information%2C%20this%20may%20help%3A%20(0x800705b4).%22%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-36011%22%20slang%3D%22en-US%22%3ERe%3A%20Problems%20with%20WSUS%20and%20recent%20Windows%2010%20CU%20updates%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-36011%22%20slang%3D%22en-US%22%3E%3CP%3EHave%20made%20additional%20changes%3A%20WsusPool%2C%20made%20Private%20Memory%20Limit%20(KB)%20to%20zero%20(not%20limited)%20and%20edited%20web.config%20for%20WSUS%3C%2FP%3E%3CP%3Echanged%3A%20%3CSPAN%20class%3D%22bigger%22%3E%3CHTTPRUNTIME%20maxrequestlength%3D%22%26quot%3B4096%26quot%3B%22%3E%3C%2FHTTPRUNTIME%3E%3C%2FSPAN%3E%3C%2FP%3E%3CP%3Eto%20%3CSPAN%20class%3D%22bigger%22%3E%3CHTTPRUNTIME%20maxrequestlength%3D%22%26quot%3B204800%26quot%3B%22%20executiontimeout%3D%22%26quot%3B7200%26quot%3B%2F%22%3E%3C%2FHTTPRUNTIME%3E%3C%2FSPAN%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EThis%20helps%20for%20the%20already%20updated%20from%20Internet%20machines.%20But%20fresh%201607%20build%20still%20shows%20the%20same%20problem.%20Will%20see%20how%20it%20goes.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-35968%22%20slang%3D%22en-US%22%3ERe%3A%20Problems%20with%20WSUS%20and%20recent%20Windows%2010%20CU%20updates%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-35968%22%20slang%3D%22en-US%22%3E%3CP%3EWas%20too%20quick%20to%20rejoice.%20After%20enabling%20Critical%20Updates%20and%20Update%20Rollups%20and%20synchronizing%20again%20it%20shows%20the%20same%20error%20and%20increasing%20timeout%20value%20not%20helping%20anymore.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-35745%22%20slang%3D%22en-US%22%3ERe%3A%20Problems%20with%20WSUS%20and%20recent%20Windows%2010%20CU%20updates%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-35745%22%20slang%3D%22en-US%22%3E%3CP%3EIn%20case%20someone%20runs%20into%20same%20problem%20with%20WSUS%204%20on%20WS2012R2%3A%20i%20have%20opened%20IIS%20Manager%20and%20right-clicked%20Sites%20%26gt%3B%20WSUS%20Administration%20site.%20Went%20into%20Advanced%20settings%2C%20expanded%20Limits%20section%20and%20increased%20Connection%20Time-out%20from%20180%20to%20320.%20Rebooted%20the%20server.%20When%20doing%20updates%20check%20from%20Win10%20machine%20it%20was%20faster%20than%20before%20and%20the%20load%20on%20the%20server%20was%20very%20brief.%20Win10%20reported%20status%20and%20found%20updates%20on%20WSUS%20correctly.%20I%20suspect%20i%20might%20need%20to%20bump%20that%20limit%20even%20more%20in%20the%20future%20once%20more%20updates%20for%20Windows%2010%20come%20out%20and%20the%20total%20size%20of%20download%20files%20increases.%3C%2FP%3E%3C%2FLINGO-BODY%3E
Oleg K
Super Contributor

It seems realted to SCOM crashesreported here https://blogs.technet.microsoft.com/germanageability/2016/10/17/october-2016-windows-patch-kb3192392...

 

But recently WSUS is having problems replying to update check from Windows 10 clients:

https://social.technet.microsoft.com/Forums/en-US/1e93872d-7dd4-4139-9537-ce40c92305f2/wsus-problem-...

 

It works fine until you synchronize Windows 10 product (just Security Updates). Then Win10 clients report 0x8024401c error when checking for updates on WSUS and IIS on WSUS is reporting time outs and memory issues with WsusPool.

10 Replies

In case someone runs into same problem with WSUS 4 on WS2012R2: i have opened IIS Manager and right-clicked Sites > WSUS Administration site. Went into Advanced settings, expanded Limits section and increased Connection Time-out from 180 to 320. Rebooted the server. When doing updates check from Win10 machine it was faster than before and the load on the server was very brief. Win10 reported status and found updates on WSUS correctly. I suspect i might need to bump that limit even more in the future once more updates for Windows 10 come out and the total size of download files increases.

Was too quick to rejoice. After enabling Critical Updates and Update Rollups and synchronizing again it shows the same error and increasing timeout value not helping anymore.

Highlighted
Solution

Have made additional changes: WsusPool, made Private Memory Limit (KB) to zero (not limited) and edited web.config for WSUS

changed: <httpRuntime maxRequestLength="4096" />

to <httpRuntime maxRequestLength="204800" executionTimeout="7200"/>

 

This helps for the already updated from Internet machines. But fresh 1607 build still shows the same problem. Will see how it goes.

My standalone Windows 10 PRO computer has downloaded the updates from Microsoft - Internet directly. When it try to install the updates of KB3211320 and KB3213986 it gives error below. I even downloaded them as standalone packages, still same issue. any idea. ? appreciate any help on this please. Thanks.

 

"There were some problems installing updates, but we'll try again later. If you keep seeing this and want to search the web or contact support for information, this may help: (0x800705b4)."

 


@Oleg K wrote:

Have made additional changes: WsusPool, made Private Memory Limit (KB) to zero (not limited) and edited web.config for WSUS

changed: <httpRuntime maxRequestLength="4096" />

to <httpRuntime maxRequestLength="204800" executionTimeout="7200"/>

 

This helps for the already updated from Internet machines. But fresh 1607 build still shows the same problem. Will see how it goes.


Was this happening on a 2016 WSUS server?

No, on Windows Server 2012 R2. Btw, i think this issue is probably only with fresh 1607 installs. We are currently installing 1703 on new machines (will switch to fresh 1709 or even 1803 this year). But i haven't reverted this changes on the WSUS server, so i can't say for sure. Have too many issues with Windows 10 and WSUS already to bring back this older issue..

I have similar issues on 2016

Do you mean with 1607 version of Windows 10 or newer?

C:\Program Files\Update Services\WebServices\ReportingWebService\Web.config

or
C:\Program Files\Update Services\WebServices\ServerSyncWebService\Web.config

or

C:\Program Files\Update Services\WebServices\ClientWebService\Web.config

?

ClientWebService
Related Conversations
Tabs and Dark Mode
cjc2112 in Discussions on
46 Replies
flashing a white screen while open new tab
Deleted in Discussions on
14 Replies
Stable version of Edge insider browser
HotCakeX in Discussions on
35 Replies
Security Community Webinars
Valon_Kolica in Security, Privacy & Compliance on
13 Replies
How to Prevent Teams from Auto-Launch
chenrylee in Microsoft Teams on
29 Replies