Event banner

Troubleshooting Windows updates

Event Ended
Thursday, Nov 30, 2023, 08:30 AM PST
Online

Event details

Join us for a deep dive into reporting and logging for Windows updates. We will show you how you can utilize reporting in the most effective manner. We will also look at logging and help you understand what the logs mean and how to read them!

 

This session is part of the Microsoft Technical Takeoff: Windows + Intune. Add it to your calendar, RSVP for event reminders, and post your questions and comments below! This session will also be recorded and available on demand shortly after conclusion of the live event.

Char_Cheesman
Updated Dec 27, 2024

19 Comments

  • IainFair's avatar
    IainFair
    Copper Contributor
    Excellent demo for troubleshooting updates issues, pity we can't utilise 2/3rds of it in practise for our troubleshooting for lack of the necessary tools used in the demo. Clearly they work so why aren't they publicly available? Even buggy they would give us more than what we currently have.
  • This was a great demo but very frustrating. The information was awesome but the fact that the tools needed are not available does not help us in any way. Things were done very fast and many steps skipped so trying to follow along was not possible. Please release the tools and a blog post to explain this better. Having access to the information in the logs help us to answer the questions that we get asked when windows updates doesn't work as expected.
  • kevintranISD007's avatar
    kevintranISD007
    Copper Contributor
    What's the main difference between AutoPatch and WUFB? Will AutoPatch be available for GCC licenses?
    • Akash_Malhotra's avatar
      Akash_Malhotra
      Icon for Microsoft rankMicrosoft

      kevintranISD007   Both Windows Autopatch and Intune use WUfB as the underlying mechanism to manage updates. The key point is that Autopatch uses WUfB but removes scheduling and approval from admins. That means that with Autopatch, you can assign devices to one of the three groups (First, Fast, Broad), but don’t have control over when updates are pushed to devices, it's done automatically! Currently not in GCC but there is a plan for that.

  • M0rth0s's avatar
    M0rth0s
    Brass Contributor
    After watching the demo, I attempted to follow along and look for the .txt file found at C:\ProgramData\USOShared\Logs\User and System. However, there was no .txt file. Tried following Microsoft KB's found here: https://learn.microsoft.com/en-us/windows/deployment/update/windows-update-logs and https://learn.microsoft.com/en-us/powershell/module/windowsupdate/get-windowsupdatelog?view=windowsserver2022-ps&viewFallbackFrom=win10-ps&preserve-view=tru . Get-WindowsUpdateLog -ETLPath resulted in error. Is there a KB that shows how to convert the ETL files from C:\ProgramData\USOShared\Logs\User to .txt?
    • AndresPae's avatar
      AndresPae
      Brass Contributor
      This is amazing how Microsoft tries to stop people to read *.etl files. There was pretty good tool called Message Analyzer, but it was discontinued on 2019 and even download was removed from MS pages. For now we (as customers) have limited set for parsing etl - separate method for every case - one tool for performance related, one for network captures, one for updates (not covering it entirely).
    • Mustafa_Jamal's avatar
      Mustafa_Jamal
      Copper Contributor
      Hey Donald, currently there is no publicly available way to convert USO ETL files to text. This tool: https://aka.ms/wucopylogsexternal does convert WU files to text format which you can use for your debugging needs!
      • mhartstein's avatar
        mhartstein
        Brass Contributor
        When will a tool be made available that can convert the USO or UX logs? We already had Get-WindowsUpdateLog to convert the WU ETLs. I feel like this session only increased frustration at how impossible it is to actually get at the detailed logging. (And that's not even talking about the inability to tail the logs in real-time...)
  • Char_Cheesman's avatar
    Char_Cheesman
    Bronze Contributor

    Thanks for joining us! We hope you enjoyed this session. If you missed the live broadcast, don’t worry – you can watch it on demand. And we’ll continue to answer questions here in the chat through the end of the week. There's more great content in store at the Microsoft Technical Takeoff! What do you like about the event so far? Share your feedback and help shape the direction of future events on the Tech Community!

  • NoNotMe's avatar
    NoNotMe
    Iron Contributor
    It is too cumbersome and time consuming for admins to drill down into multiple log files to troubleshoot update failures. What are the plans to consolidate pertinent data to admins in the Intune portal?
    • Akash_Malhotra's avatar
      Akash_Malhotra
      Icon for Microsoft rankMicrosoft

      NoNotMe Thanks for the feedback. We're dedicated to improving our reporting experience so you don't have to manually dig through logs. We're adding a bunch of alerts and signals to reporting so you can see all update issues in a single interface.

  • Jay Michaud's avatar
    Jay Michaud
    Iron Contributor
    How do we obtain the tools showed in this session ("Log Collector Tool")?
    • Mustafa_Jamal's avatar
      Mustafa_Jamal
      Copper Contributor

      Hey Jay, the tool shown in the session is partly available as it does not decode USO and UX logs. It however does decode WU logs and you can use the following link: https://logviz.blob.core.windows.net/$web/index.html

  • Derrick_Connors's avatar
    Derrick_Connors
    Copper Contributor
    For Windows Updates and Log Analytics concerning the End of Service device attribute, what mechanisms are available to import the device end of service data?
Date and Time
Nov 30, 20238:30 AM - 9:00 AM PST