Asked by:
1607 Computer in Computer Group w/Multiple Approved Feature Upgrades (1703, 1709, 1803)

Question
-
I got pulled into a WSUS issue late & I'm trying to make sense of it all.
I'm starting w/a Win 10 Enterprise 1607 (14393.576) & am testing why 1803 isn't installing.
What I've done is throw a computer into its own Computer Group that have all the 1607 (business editions) updates Approved, as per its' report in WSUS. I also have all 1607, 1703, 1709, & 1803 updates Approved. I was able to get it to upgrade to 1709 eventually & after multiple failures on 1803, I Not Approved 1803. Even after checking in when 1803 was Not Approved, it would try to install 1803 & fail.
I eventually was doing so many things to try to get it to install, I messed it up & had to do a Reset PC (keep my files) & after that it upgraded to 1803 w/o issue. That really doesn't help me in determining why it won't install on our image. Previously trying to install 1803, I was getting 0xc1900107 as the result when I'd go back & check the Update History (I saw somewhere that might be a driver issue, so I upgraded the BIOS). I ran the WU Troubleshooter multiple times & it couldn't fix the WU db so I renamed the steps to rename the SoftwareDistribution folder, too (net stop wuauserv, crptsvc, bits, msiserver & the net starts). I had ran DISM & SFC & both came back good.
I have another computer I'm doing the whole process on again, but my bigger question is: Is WSUS smart enough to see what a computer is @ & only install the appropriate update for that version before it tries to upgrade to the next feature upgrade? It appears to me that it's not & it's trying to do the 1709 updates & them the 1803 all in one shot. If that's the case, do I have to make separate groups for 1607, 1703, 1709, & 1803-level computers?
My WSUS is on Server2016.
If anyone has something meaningful to share re:this, I'd greatly appreesh it.
Thanks
Thursday, October 11, 2018 10:47 PM
All replies
-
Hello,
Even after checking in when 1803 was Not Approved, it would try to install 1803 & fail.
You client may get the 1803 upgrade file through dual-scan. To disable dual-scan, you could enable "Do not allow update deferral policies to cause scans against Windows Update" under Windows Components/Windows Update in the group policy. This policy is available from 1607, you may need the latest ADMX file installed on your DC.
You could get more information about duel-scan from below articles.
Demystifying “Dual Scan”
https://blogs.technet.microsoft.com/wsus/2017/05/05/demystifying-dual-scan/
Improving Dual Scan on 1607
https://blogs.technet.microsoft.com/wsus/2017/08/04/improving-dual-scan-on-1607/
Using ConfigMgr With Windows 10 WUfB Deferral Policies
Windows 10 Updates and Store GPO behavior with DualScan disabled and SCCM SUP/WSUS managed
https://blogs.technet.microsoft.com/swisspfe/2018/04/13/win10-updates-store-gpos-dualscandisabled-sup-wsus/
Previously trying to install 1803, I was getting 0xc1900107 as the result.
Refer to following article and check if it works.
https://www.nextofwindows.com/fixing-windows-10-insider-preview-update-error-0xc1900107
Is WSUS smart enough to see what a computer is @ & only install the appropriate update for that version before it tries to upgrade to the next feature upgrade?
This is all handled by the Windows Update Agent based on the applicability rules defined for each update in the update catalog.
Hope my answer could help you.
Best Regards,
Ray
Please remember to mark the replies as answers if they help.
If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com.
- Edited by Ray JiaMicrosoft contingent staff Friday, October 12, 2018 5:45 AM
Friday, October 12, 2018 5:41 AM -
Hello,
I am reviewing old cases. Have your issue been solved or is there any update? Please feel free to feedback.
Best Regards,
RayPlease remember to mark the replies as answers if they help.
If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com.
Monday, October 15, 2018 1:37 AM