WSUS Report vs WSUS Updates
Question
-
Hello,
I have a report from WSUS:
Computer Name Needed Installed Failed No Status vrprdssvr1 17 8507 14 0 fpgisiweb 25 8497 13 3 vmpwmtmp 21 8505 12 0 vopairmagnetapp 17 8509 12 0 sopentsql1 50 8475 10 3 sopbldbkmobile3 93 8380 6 59
When I go to the server itself and launch the Windows Updates "Check Updates" nothing is showing they are green Up-to-date.
Even if I try to launch Check Updates from Microsoft online I get few patches but nothing above 5 so far!!!
Why this discrepancy?
an example
The report is showing needed 568
the windows updates from Microsoft is proposing 2 importants and 6 optionals!!! ==> 8 versus 568!!!
Thanks,
Dom
Security / System Center Configuration Manager Current Branch / SQL
- Edited by Felyjos Monday, March 23, 2020 8:06 PM
Answers
All replies
-
Hi,
Based on your previous description, the WSUS report inconsistent with the updates available on the server may be due to a number of reasons. I analyze that the client did not detect the corresponding update because some updates may be superseded. Please consider adding the "Supersedence" column to all updated views in WSUS and sorting based on this information:You can decline the below superseded updates for the following flags:
Blue square in the middle: this update has been superseded by another update and superseded another update as well, this is an example of an update you may want to clean.
Blue square in the right below corner: this update has been superseded by another update, this is an example of an update you may want to clean.
After you have done so, the number of updates reported by WSUS may still differ from the number of updates required by the client. This is normal. Updates reported by the WSUS console include not only updates that need to be installed, but also updates that are superseded, unapproved, and expired updates. As long as the normal approval client needs the update, the client can download and install normally.
If you have any questions, please keep us in touch.
Regards,
Rita
Please remember to mark as answers if they help.
If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com.
- Edited by Rita HuMicrosoft contingent staff Tuesday, March 24, 2020 6:40 AM
-
Hi,
Based on your previous description, the WSUS report inconsistent with the updates available on the server may be due to a number of reasons. I analyze that the client did not detect the corresponding update because some updates may be superseded. Please consider adding the "Supersedence" column to all updated views in WSUS and sorting based on this information:You can decline the below superseded updates for the following flags:
After you have done so, the number of updates reported by WSUS may still differ from the number of updates required by the client. This is normal. Updates reported by the WSUS console include not only updates that need to be installed, but also updates that are superseded, unapproved, and expired updates. As long as the normal approval client needs the update, the client can download and install normally.
If you have any questions, please keep us in touch.
Regards,
Rita
Please remember to mark as answers if they help.
If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com.
Thank you let me try to add the column and see how it impacts the report...
Dom
Security / System Center Configuration Manager Current Branch / SQL
