Tech Community Live: Endpoint Manager edition
Jul 21 2022, 08:00 AM - 12:00 PM (PDT)

Windows 10 clients not installing all required updates from MECM

%3CLINGO-SUB%20id%3D%22lingo-sub-2404634%22%20slang%3D%22en-US%22%3EWindows%2010%20clients%20not%20installing%20all%20required%20updates%20from%20MECM%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-2404634%22%20slang%3D%22en-US%22%3E%3CP%3EWe%20have%20300%2B%20clients%20not%20installing%20all%20required%20updates.%20These%20300%20clients%20are%20part%20of%202000%20machines%20that%20are%20all%20in%20the%20same%20collection.%20Would%20upgrading%2C%20in-place%2C%20erase%20older%20update%20history%3F%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20image-alt%3D%22bcerveny_0-1622051182177.png%22%20style%3D%22width%3A%20400px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F283945iCE28F6AC624844B2%2Fimage-size%2Fmedium%3Fv%3Dv2%26amp%3Bpx%3D400%22%20role%3D%22button%22%20title%3D%22bcerveny_0-1622051182177.png%22%20alt%3D%22bcerveny_0-1622051182177.png%22%20%2F%3E%3C%2FSPAN%3E%3C%2FP%3E%3CP%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20image-alt%3D%22bcerveny_0-1622729762264.png%22%20style%3D%22width%3A%20400px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F285946i63D096D30794A06E%2Fimage-size%2Fmedium%3Fv%3Dv2%26amp%3Bpx%3D400%22%20role%3D%22button%22%20title%3D%22bcerveny_0-1622729762264.png%22%20alt%3D%22bcerveny_0-1622729762264.png%22%20%2F%3E%3C%2FSPAN%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-2404634%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3EWindows%2010%20clients%20not%20install%20all%20required%20updated%20from%20MECM%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E%3CLINGO-SUB%20id%3D%22lingo-sub-2472887%22%20slang%3D%22en-US%22%3ERe%3A%20Windows%2010%20clients%20not%20installing%20all%20required%20updates%20from%20MECM%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-2472887%22%20slang%3D%22en-US%22%3EHi%20bcerveny%2C%3CBR%20%2F%3E%3CBR%20%2F%3EYou'll%20want%20to%20check%20client%20side%20on%20a%20few%20devices%20to%20determine%20if%20the%20client%20sees%20the%20updates%20in%20question%20as%20missing%2Fapplicable.%20There%20are%20a%20few%20CM%20logs%20to%20review%20such%20as%20UpdatesHandler%2C%20UpdatesStore%2C%20WUAHandler%2C%20and%20UpdatesDeployment.%20%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fmem%2Fconfigmgr%2Fcore%2Fplan-design%2Fhierarchy%2Flog-files%23BKMK_SU_NAPLog%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3Ehttps%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fmem%2Fconfigmgr%2Fcore%2Fplan-design%2Fhierarchy%2Flog-files%23BKMK_SU_NAPLog%3C%2FA%3E%3CBR%20%2F%3E%3CBR%20%2F%3EDepending%20on%20what%20you%20find%20will%20dictate%20next%20steps.%20If%20CM%20is%20reporting%20the%20updates%20as%20not%20required%2Fnot%20applicable%2C%20then%20you%20would%20need%20to%20look%20into%20the%20windows%20update%20agent's%20(WUA)%20log%20file%2C%20WindowsUpdate.log.%20If%20CM%20is%20reporting%20the%20updates%20as%20applicable%20but%20the%20install%20is%20not%20taking%20place%2C%20then%20logs%20such%20as%20UpdatesDeployment%20should%20provide%20more%20clues.%20This%20is%20probably%20one%20that%20will%20need%20engagement%20with%20technical%20support%20but%20hopefully%20I%20have%20given%20a%20few%20things%20to%20check%20first.%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-2481048%22%20slang%3D%22en-US%22%3ERe%3A%20Windows%2010%20clients%20not%20installing%20all%20required%20updates%20from%20MECM%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-2481048%22%20slang%3D%22en-US%22%3EKeep%20in%20mind%20that%20NOT%20all%20SU%20are%20listed%20within%20the%20control%20panel%20on%20the%20computer.%20Particularly%20if%20deployed%20by%20CM.%3C%2FLINGO-BODY%3E
Senior Member

We have 300+ clients not installing all required updates. These 300 clients are part of 2000 machines that are all in the same collection. Would upgrading, in-place, erase older update history?

 

bcerveny_0-1622051182177.png

bcerveny_0-1622729762264.png

 

 

5 Replies
Hi bcerveny,

You'll want to check client side on a few devices to determine if the client sees the updates in question as missing/applicable. There are a few CM logs to review such as UpdatesHandler, UpdatesStore, WUAHandler, and UpdatesDeployment. https://docs.microsoft.com/en-us/mem/configmgr/core/plan-design/hierarchy/log-files#BKMK_SU_NAPLog

Depending on what you find will dictate next steps. If CM is reporting the updates as not required/not applicable, then you would need to look into the windows update agent's (WUA) log file, WindowsUpdate.log. If CM is reporting the updates as applicable but the install is not taking place, then logs such as UpdatesDeployment should provide more clues. This is probably one that will need engagement with technical support but hopefully I have given a few things to check first.
Keep in mind that NOT all SU are listed within the control panel on the computer. Particularly if deployed by CM.
That issue should have been addressed a long time ago Garth. Definitely let me know if this is still being experienced. Provide the Windows build and I can double check.

I know that the status messages will get resent to CM (or at least that is what @jasonsandy says) but the control panel will still not list all SU for example (and yes I looked under under Other Updates section) too.

comp5.jpg

 

What would help would be wuahandler logs showing the install and then screenshots of the update history view showing specific updates missing. The original issue dealt with any updates installed via CM (ccmexec) being filtered out of the history view. Not sure why some would show and others wouldn't.