Multiple devices unable to connect to Windows Update
I have now seen 8 devices that are unable to connect and download Windows Updates. They vary between Windows 10 and Windows 11 and all started in the past month. When trying to run updates I am given the error in the image attached. I have tried the following to solve the issue but have not had any luck. Restarted the Windows Update service from Services Run the Windows Update Troubleshooter Changed the DNS servers Delete the SolftwareDistribution folder (after using net stop wuauserv, cryptSvc, bits, msiserver, deleting SoftwareDistribution, then net start wuauserv, cryptSvc, bits, and msiserver) Run SFC Run DISM Uninstalled the three updates that were available to uninstall (thinking something in one of them failed and caused this) Reset Windows components (https://www.tenforums.com/tutorials/24742-reset-windows-update-windows-10-a.html) Disabled Proxy in Network and Internet Run Windows Store Reset (WSRESET.exe) None of the following has helped. Does anyone have any other ideas other than reimaging the device?
3rd party Whitelisting Application Control and Windows OS Upgrades from SCCM
Hello everyone! I am being as ambiguous as possible because I do not want to identify the vendor or customer. I am an admin for a 3rd party Application Control software with a client with a concern: OS: Windows 10 1909, upgrading to 20H2 Some context: Automating Windows Upgrades. I use 3rd party software to manage the same software. Windows Updates work fine, as only a few execution control rules need to be created. Major OS Upgrades (1909 to 20H2, in this case) are largely blocked, which is by design since the Windows directory itself is protected. The customer has a strict governance on the software allowed/whitelisted. While my software has a specific mode that is designed for this type of upgrade, which by nature allows changes to be made to the system. Leaving the system in this mode longer than is required for the OS Upgrade is a security hole we need to avoid. We do this the Application to change to this mode in order to make the required changes to the OS. Currently, SCCM creates a custom variable that my software scans for, and then executes the change on the system(s), then creates another variable when the upgrade is complete to lock the system down again. I do not want to depend on SCCM for my deployments. I'm trying to remove an extra point of failure. All that leads to this ask: Is there any flag, change, or otherwise modification that occurs, with respect to Windows, before the upgrade? I'm effectively looking for something that I can detect or scan for reliably to automate changing modes from my own automation. Thank y'all for your time!
