Windows 10: WSUS Client reporting but not downloading any updates.

I have a WSUS Server Windows Server 2016 and Windows 10 22H2 clients. The WSUS server receives updates via an external connected server since this server is within a stand-alone environment. All updates have been transferred from the external server to the internal server as well as the metadata. Updates have been approved and declined accordingly and maintenance has been ran via Optimize-WsusServer.ps1 in the WID/SQL database. I have configured everything by group policy and the clients are reporting correctly to the WSUS server and are seen as needing certain updates but when I click on

:)

 

WSUS clients are not able to get an updates. WSUS is reporting different version of client.

Hello guys,

We have issues across our company that 1709 users with Windows 10 are not getting updates from our WSUS server (2012 R2).

We tried known hot fixes such as deleting SoftwareDistribution folder, forcing service to stop and run again, manually find updates, restarting clients, restarting WSUS, downloading all avaiable updates
for WSUS, run diag tool downloaded from Microsoft on clients but nothing helps.

We are also tried to run new 2016 WSUS server but situation did not changed. I think maybe problem is in client version 1709?

Windows 10 1709 (16299.309) (WSUS is reporting 10.0.16299.248)

Windows 2016 (14393.2125)

We have around 150 clients with this issue.

Issues:

1. WSUS server is reporting that clients need updates but clients are not getting any.

2. Some clients are not reporting back but they are reachable. (F.E. Last report 25.2.2018)

3. When we are connected remotely to client PC and run WU manually, WU is telling us that PC has all needed updates and none are available.

4. We can see different version in WSUS than client's version really is (agent version - maybe this is the issue?)

I hope my description is enough, I saw many forums / users / companies are dealing with same issue but there is not a fix for this yet and also I did not saw a thread on Microsoft about this exact problem
yet. I am already googling this for 3 days...

Thanks for answering,

Best regards

Ondrej

 

windows 10 client reports not applicable to WSUS

Dear Community,

I have a strange problem here.

I have a WSUS running since years and all works fine in the past. Since some month all clients report "not applicable" to WSUS for all needed updates. I tried a lot of WSUS fixes but nothing helps.

If I look at the clients I see, that all needed updates are installed, only the status is not reported back to WSUS. Status in WSUS in "not applicable" in stead of "installed"

If I change this to settings on the client

HKLM\Software\Policies\Microsoft\Windows\WindowsUpdate\DisableDualScan = 1

HKLM\Software\Policies\Microsoft\Windows\WindowsUpdate\DoNotConnectToWindowsUpdateInternetLocations = 1

then the clients are reporting their state back to WSUS but Microsoft store in not working anymore.

How to fix this?

It looks like all clients are searching for updates in the internet first not at the WSUS server, install them and report to WSUS that the updates are not needed anymore (not applicable)?

 

WSUS clients are not able to get an updates. WSUS is reporting different version of client.

Just noticed that:

Any clients that have quit reporting and failed to play nice with WSUS have both of these security rollups:

KB4093108

KB4093118

The clients that work fine do not have the above patches installed. It is the same regardless if they are Win-7, Win2008 server, or Win-10.

My WSUS server only serves up about 69 clients and 23 of them started experiencing the issue around the same time that the above patches were installed. Being that they are roll-ups, they can't be uninstalled.

Not a happy camper with MS and WSUS right now.