Upgrade from 1607 to 1703 RRS feed

  • Question

  • How can I upgrade the Win 10 clients from 1607 to 1703 via wsus? I have around 600+ users to upgrade.
    Thursday, October 5, 2017 10:09 AM

All replies

  • If you are going to deploy upgrades from Windows 10 to Windows 10 latest streams there are 3 things you need to do.

    1. In Products/Classifications, make sure to check off the Upgrades box or Windows 10 will not be available to deploy.
    2. You also will need to add a MIME type for *.esd as application/octet-stream at the top level in IIS.
    3. Install KB3159706 which should come as a regular Windows update on the WSUS 2012 or 2012 R2 Server. Then you need to perform the extra manual steps that are documented here: https://support.microsoft.com/en-us/kb/3159706. Make sure you do ALL OF THE STEPS, including the ones for SSL, even if you do not use SSL currently.

    If all of these are in place, you may have a dirty WSUS database, according to this article by Microsoft (https://support.microsoft.com/en-us/help/3194588/-0xc1800118-error-when-you-push-windows-10-version-1607-by-using-wsus), it's caused by downloading the Windows upgrades before installing (and configuring) KB3159706.

    This can be resolved in the following way:

    Download my script and run .\Clean-WSUS.ps1 -DirtyDatabaseCheck

    It will check to see if you have a dirty database, and report if it's clean or dirty. If it's dirty, then it will fix it for you.

    Have a peek at my Adamj Clean-WSUS script. It is the last WSUS Script you will ever need!


    What it does:

    1. Add WSUS Index Optimization to the database to increase the speed of many database operations in WSUS by approximately 1000-1500 times faster.
    2. Remove all Drivers from the WSUS Database (Default; Optional).
    3. Shrink your WSUSContent folder's size by declining multiple types of updates including by default any superseded updates, preview updates, expired updates, Itanium updates, and beta updates. Optional extras: Language Packs, IE7, IE8, IE9, IE10, Embedded, NonEnglishUpdates, ComputerUpdates32bit, WinXP.
    4. Remove declined updates from the WSUS Database.
    5. Clean out all the synchronization logs that have built up over time (configurable, with the default keeping the last 14 days of logs).
    6. Compress Update Revisions.
    7. Remove Obsolete Updates.
    8. Computer Object Cleanup (configurable, with the default of deleting computer objects that have not synced within 30 days).
    9. Application Pool Memory Configuration to display the current private memory limit and easily set it to any configurable amount including 0 for unlimited. This is a manual execution only.
    10. Checks to see if you have a dirty database, and if you do, fixes it. This is primarily for Server 2012 WSUS, and is a manual execution only.
    11. Run the Recommended SQL database Maintenance script on the actual SQL database.
    12. Run the Server Cleanup Wizard.

    It will email the report out to you or save it to a file, or both.

    Although the script is lengthy, it has been made to be super easy to setup and use so don't over think it. There are some prerequisites and instructions at the top of the script. After installing the prerequisites and configuring the variables for your environment (email settings only if you are accepting all the defaults), simply run:

    .\Clean-WSUS.ps1 -FirstRun

    If you wish to view or increase the Application Pool Memory Configuration, or run the Dirty Database Check, you must run it with the required switch. See Get-Help .\Clean-WSUS.ps1 -Examples

    If you're having trouble, there's also a -HelpMe option that will create a log so you can send it to me for support.

    Adam Marshall, MCSE: Security

    • Proposed as answer by Yan Li_ Friday, October 20, 2017 7:21 AM
    Thursday, October 5, 2017 12:44 PM
  • Hello,

    Any update? As long as you have Upgrades selected under Product in WSUS Option, you should be able to upgrade Windows 1607 to 1703. 

    In addition, WSUS approving updates is computer based, not user based. You should point those Windows 10 1607 computer to your WSUS server to get updates, and then approve updates for them. Then they can install the approved updates. 



    Please remember to mark the replies as answers if they help. If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com.

    Friday, October 20, 2017 7:24 AM