locked
Windows 10 PC's can't get updates from WSUS while Windows 7 can RRS feed

  • Question

  • We are getting a lot of "Microsoft Updates" traffic coming into the network and is literally flooding it. This happens even thought all clients are set to update through WSUS by GPO. We have noticed that only Windows 10 PC's download updates directly from Microsoft while windows 7 don't (we observe this on our Firewall).

    Observations and conditions:

    *Windows Server Version: WS2008 R2 standard SP1

    *WSUS version 3.2.7600.226

    *Clients Updating directly from Microsoft: 19 Windows 10 PC's

    *Clients Updating from WSUS: 13 Windows 7 PC's

    *Internet connection: 100 Mbps down, 10 Mbps up

    *Incoming traffic url's 2.tlu.dl.delivery.mp.microsoft.com and officecdn.microsoft.com.edgesuite.net mainly

     

    GPO applied to client computers:

    *Specify Intranet Microsoft update service location: updates and statistics server http://wsus.mydomain

    *Configure Automatic Updates: Auto download and schedule the install every Friday a 13:00

    I know the GPO are correctly applied because the automatic updates configuration is shown on all client computers (both Windows 10 and 7)

     

    All seems to be correctly configured, yet according to my firewall, all Windows 10 computers get updates directly from Microsoft

    Please help me solve this issue.

    Regards

    Thursday, May 5, 2016 4:08 PM

Answers

  • Hi Dirceu Pavon,

    1.> WSUS version 3.2.7600.226

    Please upgrade your WSUS server's version by installing the related KB. If you want to upgrade to 3.2.7600.274 (also recommended to), only need to install KB2938066.

    WSUS 3.0 (SP2): Build 3.2.7600.226
    WSUS 3.0 (SP2) + KB2720211: Build 3.2.7600.251
    WSUS 3.0 (SP2) + KB2734608: Build 3.2.7600.256
    WSUS 3.0 (SP2) + KB2828185: Build 3.2.7600.262
    WSUS 3.0 (SP2) + KB2938066: Build 3.2.7600.274

    2. Do you see Win10 clients show up in WSUS server's console? If yes, what is the report status, do they report recently?

    3. Please run gpresult /h C:\result.html to check if win10 clients apply the GPO correctly.

    4. We may also check related registry keys, check if the WSUS server's address is correct:

    https://technet.microsoft.com/en-us/library/cc708449(v=ws.10).aspx

    Best Regards,

    Anne


    Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Support, contact tnmff@microsoft.com.


    Friday, May 6, 2016 6:32 AM