Event banner
Troubleshooting Windows updates
Event details
Join us for a deep dive into reporting and logging for Windows updates. We will show you how you can utilize reporting in the most effective manner. We will also look at logging and help you understand what the logs mean and how to read them!
This session is part of the Microsoft Technical Takeoff: Windows + Intune. Add it to your calendar, RSVP for event reminders, and post your questions and comments below! This session will also be recorded and available on demand shortly after conclusion of the live event. |
19 Comments
- IainFairCopper ContributorExcellent demo for troubleshooting updates issues, pity we can't utilise 2/3rds of it in practise for our troubleshooting for lack of the necessary tools used in the demo. Clearly they work so why aren't they publicly available? Even buggy they would give us more than what we currently have.
- Gavin CampbellOccasional ReaderThis was a great demo but very frustrating. The information was awesome but the fact that the tools needed are not available does not help us in any way. Things were done very fast and many steps skipped so trying to follow along was not possible. Please release the tools and a blog post to explain this better. Having access to the information in the logs help us to answer the questions that we get asked when windows updates doesn't work as expected.
- kevintranISD007Copper ContributorWhat's the main difference between AutoPatch and WUFB? Will AutoPatch be available for GCC licenses?
- Akash_Malhotra
Microsoft
kevintranISD007 Both Windows Autopatch and Intune use WUfB as the underlying mechanism to manage updates. The key point is that Autopatch uses WUfB but removes scheduling and approval from admins. That means that with Autopatch, you can assign devices to one of the three groups (First, Fast, Broad), but don’t have control over when updates are pushed to devices, it's done automatically! Currently not in GCC but there is a plan for that.
- M0rth0sBrass ContributorAfter watching the demo, I attempted to follow along and look for the .txt file found at C:\ProgramData\USOShared\Logs\User and System. However, there was no .txt file. Tried following Microsoft KB's found here: https://learn.microsoft.com/en-us/windows/deployment/update/windows-update-logs and https://learn.microsoft.com/en-us/powershell/module/windowsupdate/get-windowsupdatelog?view=windowsserver2022-ps&viewFallbackFrom=win10-ps&preserve-view=tru . Get-WindowsUpdateLog -ETLPath resulted in error. Is there a KB that shows how to convert the ETL files from C:\ProgramData\USOShared\Logs\User to .txt?
- AndresPaeBrass ContributorThis is amazing how Microsoft tries to stop people to read *.etl files. There was pretty good tool called Message Analyzer, but it was discontinued on 2019 and even download was removed from MS pages. For now we (as customers) have limited set for parsing etl - separate method for every case - one tool for performance related, one for network captures, one for updates (not covering it entirely).
- M0rth0sBrass ContributorAppreciate the advice!
- Mustafa_JamalCopper ContributorHey Donald, currently there is no publicly available way to convert USO ETL files to text. This tool: https://aka.ms/wucopylogsexternal does convert WU files to text format which you can use for your debugging needs!
- mhartsteinBrass ContributorWhen will a tool be made available that can convert the USO or UX logs? We already had Get-WindowsUpdateLog to convert the WU ETLs. I feel like this session only increased frustration at how impossible it is to actually get at the detailed logging. (And that's not even talking about the inability to tail the logs in real-time...)
- Char_CheesmanBronze Contributor
Thanks for joining us! We hope you enjoyed this session. If you missed the live broadcast, don’t worry – you can watch it on demand. And we’ll continue to answer questions here in the chat through the end of the week. There's more great content in store at the Microsoft Technical Takeoff! What do you like about the event so far? Share your feedback and help shape the direction of future events on the Tech Community!
- NoNotMeIron ContributorIt is too cumbersome and time consuming for admins to drill down into multiple log files to troubleshoot update failures. What are the plans to consolidate pertinent data to admins in the Intune portal?
- Akash_Malhotra
Microsoft
NoNotMe Thanks for the feedback. We're dedicated to improving our reporting experience so you don't have to manually dig through logs. We're adding a bunch of alerts and signals to reporting so you can see all update issues in a single interface.
- Jay MichaudIron ContributorHow do we obtain the tools showed in this session ("Log Collector Tool")?
- Mustafa_JamalCopper Contributor
Hey Jay, the tool shown in the session is partly available as it does not decode USO and UX logs. It however does decode WU logs and you can use the following link: https://logviz.blob.core.windows.net/$web/index.html
- Derrick_ConnorsCopper ContributorFor Windows Updates and Log Analytics concerning the End of Service device attribute, what mechanisms are available to import the device end of service data?
- Akash_Malhotra
Microsoft
Derrick_Connors You can enroll into Windows Update for Business reports overview - Windows Update for Business reports | Microsoft Learn and you won't need to do any manual work to pull that data!
- Char_CheesmanBronze Contributor
Welcome to Troubleshooting Windows updates and the second annual Microsoft Technical Takeoff for Windows + Intune! Have a question? Post here in the Comments so we can help. Let’s make this an active Q&A!
- treestryderIron Contributor
[Edited] My questions were answered here:
Re: The latest on managing Windows updates in Microsoft Intune - Microsoft Community Hub