WSUS
30 Topics- Error 0x80242017 when installing KB5004945 from WSUS (but not from Microsoft)I have several clients running Win 10 v20H2 that are failing to install the update "2021-07 Cumulative Update for Windows 10 Version 20H2 for x64-based Systems (KB5004945) from our WSUS server with "Status: download error - 0x80242017". However, if I manually log into the workstation and "Check online for updates from Microsoft Update", it downloads and installs the update with no errors. The "Self Contained" cab file for the update is present in the proper directory on the WSUS server, although the two "Express" files are not. The WSUS server is running on Windows Server 2019 v1809. Here's what I've done for troubleshooting on the client side: Run Windows Update Troubleshooter: It can't find any issues. Reset Windows Updates components "manually" using batch script. Run dism /online /cleanup-image /restorehealth Run sfc /scannow I've attached the System and WindowsUpdateClient event logs, as well as the CBS.log and DISM.log from the workstation I'm troubleshooting with.Solved80KViews0likes16Comments
- Installing Report Viewer 2012 RuntimeHello, I have WSUS installed on Windows Server Standard 2019 (x64), so I'm trying to get access to some reports but the system is asking me for the Report Viewer 2012. When I launch the installer I got this message: Any clue where can I get it, because from MS I can't get it. Thank you guys,14KViews0likes9Comments
- error 0x80070661Hello. We have 114 virtual machines with windows 2008 r2, all with the first year license active. In March we activated the second year license on all 2008R2 servers. They all update through WSUS but there are 4 servers with an active second-year ESU license that do not update. The error is the same in all four. The error is 0x80070661. All other 2008R2 servers update successfully. I have uninstalled and reinstalled the ESU 2nd year license but the problem persists. I do not see what the problem is. Thank you7.5KViews1like0Comments
- WSUS 10.0.17763.678 fails to download any updates since in-place upgrade. Event 10032, 364Hi everyone, after in-place upgrade from Server 2016 LTSC GUI to 2019 LTSC GUI and running the WSUS post upgrade wizard, the WSUS Server fails to download any updates. Events 364 Error Content file download failed. Reason: Value does not fall within the expected range. Source File: /d/msdownload/update/software/secu/2015/06/sqlserver2014-kb3070446-x64_aab1ac21337a4f0b20d228c21fc7c9eb68418431.exe Destination File: E:\WSUSFiles\WsusContent\31\AAB1AC21337A4F0B20D228C21FC7C9EB68418431.exe 10032 Error The server is failing to download some updates. latest WAM is in place and everything else like Clients contacting and DL works fine. Usual optimizations on Pool etc are in place. I have checked the permissions guidance from Adam J. (btw. the docs article is still missing in en-us) WSUS Permissions - WsusContent, Registry, and IIS | AJ Tek CorporationSolved7.2KViews1like4Comments
- Windows Server 2016 does not install updates at scheduled timeWe have an OU for servers that we don't mind if they install Windows Updates and reboot nightly. For some reason, the Server 2016 servers in that OU do not automatically install updates at the time scheduled by the GPO. The settings on the servers appear to be applied correctly, and it does detect that there are updates available... it just doesn't install them at the scheduled time. Settings from relevant Windows Update GPO: WU settings on the server: WU Restart Options on the Server: WU Policy Registry settings on the server: Any suggestions as to why this may be?Solved7.1KViews1like5Comments
- WSUS 0x80244022Hi, We deploy a WSUS server using Windows Server 2019 (version 1809) with latest updates. Some Windows 10 clients are not reporting to WSUS and show an 0x80244022 error when you try to check updates manually. WSUS services has 10.0.17763.1. This is our GPO: Some Windows 10 clients receive this GPO and we found all keys at registry: We modify IIS this pool: 'WsusPool' But they show the same errors. We try to delete 'SoftwareDistribution' folder, wuauclt /reportnow command and more without success. I try to search updates in a computer (Windows 10 21H1). Attached are the wsus client logs. It shows that http://wsus2019.yyy.xxx:8530/ClientWebService/client.asmx is overloaded and it takes an 503 code. But if I try to connect to this URL, it works. Anyone can help us? Thanks!6.6KViews0likes0Comments
- Windows 10 clients does not download 2004 (1909) Upgrade from 2016 WSUS ServerHi, On our Network there is a Windows Server 2016 running with the latest updates and WSUS. Our clients can update themself from WSUS, but the bigger upgrade to the new Windows 10 versions like the 1909 or 2004 does not work. It seems that the client downloads the "WindowsUpdateBox.exe", but it can not download the .esd file from the server, just throws an error of 0x80070057. The server does contain the .esd file for the upgrade, but the client can not download it. As I have read in many forums, the IIS should contain the MIME-TYPE for the .esd files of application/octet-stream, so I was looking for it and my server already had an entry point for that type. Changing it to application/octet-stream did not change the clients behavior. I have read that these upgrades are quailified as "dynamic updates" and the clients try to download these .esd files from the MS update, not the WSUS server. How could I force them to try the download from our server? All of our clients are behind an authenticated proxy, and it is not an option to let them out to update freely. The GPO which not let them out to the Windows update online would disable Windows store as well, but we need that function to work too. What option do I have left, how could I force the clients to upgrade from WSUS?5.5KViews0likes5Comments
- Wsus windows 21h1 updateHello everyone, my wsus server (server 2016) synced the feature update to 21H1 but every client (all 20H2) is reporting not needed. I noticed that it synced only the full update and not the enablement package. Anyone have the same problem or know something? Thank youSolved5.3KViews0likes8Comments
- Unexpected Automatic Windows Server Updates Despite GPO and WSUS ConfigurationsHello everyone, I am experiencing a disruptive issue across a number of our Windows servers (ranging from Server 2012 to Server 2022). Despite a carefully managed WSUS implementation and GPO enforcement for Windows Updates, we have been facing an issue where several updates are getting automatically installed on these servers. The problem is, these updates are not ones we have explicitly approved, nor are they manually triggered for download/installation. The automatic reboots following these installations are causing significant service disruptions. Furthermore, the behavior seems to be somewhat random, which makes it even more challenging to root cause. Here is a summary of the GPO and WSUS configurations, and what I have verified so far: The GPO for Windows Updates is configured to '4 - Auto download and schedule the install'. The RSOP confirmed that there are no conflicting GPOs. WSUS is functioning correctly and the automatic approval of updates has been disabled. Dual Scan is not a factor as it's not relevant to the Windows Server versions we're using. It has been confirmed that the updates in question are indeed WSUS updates, but they haven’t been approved by us. The issue does not pertain to pre-downloaded update files or Service Stack Updates (SSUs). Given the above points, I am having a hard time figuring out why these updates are being installed and causing unplanned reboots. I would really appreciate it if anyone who has encountered a similar issue or anyone with insights could shed some light on this. Thank you in advance for your assistance! Best3.7KViews1like3Comments
- Best Practice for Windows Server 2012 R2 and 2016 for 24/7 Operating Manufacturing System.Hello, We have about 60 Windows 2012 R2 and 2016 servers for 24/7 operating manufacturing lines. These servers seem to have not updated at all since 2018, I have to plan how to update these servers as fast as I can but don't impact or break applications running on it. There are lots of old .Net developed applications and PLC software. Windows 2012 R2 server patch strategy: So, I liked to apply Security Only Updates to the server, but since the patch has only the month's security patches, I have to apply all security patches from 7/2016 which is almost impossible. So, I have to update the server with Monthly Rollup 3/2021 which has cumulative updates from 7/2016. Question 1. Microsoft says Monthly rollup contains other updates with security updates. Does it contain other updates such as Flash, .Net, and others which may break my old .Net applications installed on the server? I like to update the server up to date, but very least impact on the server. Question 2. For critical 24/7 operation servers, do you guys install Security Only Update or Monthly Rollup regularly? Windows 2016 server patch strategy: Microsoft seems they changed the update scheme and there's only Monthly Rollup. Question 3: If then, if you want to patch your server with the least risk, how do you patch your 2016 servers? Just apply Montly rollup and have you find any issue? Thank you in advance. Updates: I patched 30 Windows servers 2012R2/2016 with monthly rollups 1 week ago, no issue so far. -2012 R2: Feb 2021, 0.5GB, took 15 minutes -2016: Feb 2021, 1.5GB (You need to install the latest SSU (Servicing Stack update before applying monthly rollup), took 40 mintues. As I researched, Monthly rollup contains reliability update besides security update, but not .net or other application related updates, so it's quite safe that it will not break existing application states. I had lots of issues the windows update breaking applications with Windows 7/2008, but Microsoft seems doing quite well on making monthly rollup is stable. For .net, it has its own update history and separate channel.Solved3.4KViews0likes4Comments