locked
Windows 10 updates does not install automatically RRS feed

  • Question

  • Hi,
    (sorry for my bad english)
    I have problem to update automatically my Windows 10 computers with WSUS server and GPO.
    My WSUS Server : 2012R2.
    My computer client : Windows 10 Professional 1709.

    => Updates doesn’t install automatically. They stay in state : « Waiting for installation ».
    If i manually clic on « install now » updates are installed.

    But i want an automatic installation without user interaction.

    In my GPO / Component Windows Update I have set this :
        -Allow install immediately : Activated
        -Target client : MyWsusGroup
        -Configure automatic updates : 4- Download and schedule install , all days 19:00
        -Frequency of detection : 5h
        -Locate Specify intra Microsoft Update : http://mysrv.mydomain.com:8530



    I have try this but not work better :

    1- Check if service : TrustedInstaller and Wuauserv => Start automatically and are running

    2- I have also try this :    -net stop wuauserv
        -delete the following registry keys:
    HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\SusClientId
    HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\ SusClientIdValidation
        -net start wuauserv
        -wuauclt /resetauthorization /detectnow

    3- net stop wuauserv
    net stop bits
    rename C:\Windows\SoftwareDistribution SoftwareDistribution.BAK
    net start wuauserv
    net start bits

    4-  gpupdate /force
    gpresult /h show the GPO what i have set

    5- Uninstall antivirus (GDATA)

    6- Change download bypass mode to 100

    7- Disable Windows firewall

    8- Update admx on my domain controler

    Someone have an idea ?

    See my WindowsUpdate.log here => http://pasted.co/a9926c1f

    Regards.

    • Edited by Florentyyy Monday, February 5, 2018 5:26 PM
    Monday, February 5, 2018 5:24 PM

Answers

  • Not solve but get around with vbs script to force windows update :
    https://msdn.microsoft.com/en-us/library/aa387102(VS.85).aspx
    • Marked as answer by Florentyyy Tuesday, February 20, 2018 4:11 PM
    Tuesday, February 20, 2018 4:11 PM

All replies

  • It Seems your Group Policy settings are wrong as your description..

    Please Share your existing Group Policy settings which are relevant with WSUS..

    Anyway this guide may help you to troubleshoot further more.....

    https://gallery.technet.microsoft.com/office/Troubleshooting-WSUS-d63da113

    Monday, February 5, 2018 11:23 PM
  • Hi,

    Why you say group policy settings are wrong as my description ?

    When i do gpresult /h c:\gpo.html i see my wsus gpo

    Tuesday, February 6, 2018 7:32 AM
  • Not solve but get around with vbs script to force windows update :
    https://msdn.microsoft.com/en-us/library/aa387102(VS.85).aspx
    • Marked as answer by Florentyyy Tuesday, February 20, 2018 4:11 PM
    Tuesday, February 20, 2018 4:11 PM
  • I have this same issue.  Windows 7 clients install automatically. Just not Windows 10
    Tuesday, June 5, 2018 3:12 PM
  • me too
    Wednesday, January 2, 2019 2:37 AM
  • I have this same issue.  Windows 7 clients install automatically. Just not Windows 10
    if you find solution. help me 
    Wednesday, January 2, 2019 2:54 AM
  • I have this same issue.  Windows 7 clients install automatically. Just not Windows 10

    if you find solution. help me 

    Start here:

    https://www.ajtek.ca/wsus/how-to-setup-manage-and-maintain-wsus-part-3-windows-as-a-service-waas-and-group-policy-administrative-templates/

    Read through parts 3,4,5,6,7,8 (and optionally 1 and 2).

    Adjust your GPOs accordingly and if you're still having issues:

    From an Administrative Command Prompt on an affected client, run the following:
    gpresult /h gpo.htm
    and share the result with your favourite method or pastebin it so that we can see it.


    Adam Marshall, MCSE: Security
    https://www.ajtek.ca
    Microsoft MVP - Windows and Devices for IT

    Friday, January 4, 2019 2:37 AM
  • That script should do the job - if you are not into scripting everything yourself, we are using a command line tool called WuInstall which basically wraps the wohl update API on one command line tool to install windows updates without user interaction

    Basically, you just type

    wuinstall /install

    in your command line to force the install pending updates. In combination of psexec you can also script the update on multiple machines, thats how we patch our servers unattended. It is a commercial product that is suppored and regulary updated, you can check their website (http://www.wuinstall.com), it has quite an extensive documentation on the options like filtering updates and so on

    • Proposed as answer by AntonGu Wednesday, January 9, 2019 12:39 PM
    Monday, January 7, 2019 10:01 AM