locked
Windows 10 upgrade through WSUS fails RRS feed

  • Question

  • Hi,

    I have WSUS server installed on a domain joined Windows Server 2012. Updates distribution is working fine but upgrades are failing for all of the Windows 10 machines. On client side feature update is stuck at 0% download. This happens for both 1607 and 1703 upgrades version. KB3159706 is installed on the server.

    Wednesday, May 10, 2017 9:12 AM

Answers

  • If you are going to deploy upgrades from Windows 10 to Windows 10 latest streams there are 3 things you need to do.

    1. In Products/Classifications, make sure to check off the Upgrades box or Windows 10 will not be available to deploy.
    2. You also will need to add a MIME type for *.esd as application/octet-stream at the top level in IIS.
        To do this: Open IIS Manager > Select the server name > From the "IIS" section in the centre of IIS Manager, open "MIME Types" > Click "Add…" >
        File Mame Extention: = .esd
        MIME type: application/octet-stream
    3. Install KB3159706 which should come as a regular Windows update on the WSUS 2012 or 2012 R2 Server. Then you need to perform the extra manual steps that are well documented here: https://support.microsoft.com/en-us/help/3159706/update-enables-esd-decryption-provision-in-wsus-in-windows-server-2012-and-windows-server-2012-r2 - Perform ALL OF THE STEPS including the ones for SSL (which is Microsoft's best practice anyways).
    • Proposed as answer by Wendy Jiang Friday, May 19, 2017 11:21 AM
    • Marked as answer by Vlado84 Wednesday, June 14, 2017 2:41 PM
    Saturday, May 13, 2017 3:51 AM

All replies

  • Hi,
    You could choose a problematic windows 10 1703 machine to manually install the updates and see if it works.
    Regarding windows 10 1607 machine, please make sure that you have installed the latest update on it, you could see it from here: 
    Windows 10 update history
    https://support.microsoft.com/en-us/help/4018124/windows-10-update-history
    Best regards, 
    Wendy

    Please remember to mark the replies as answers if they help.
    If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com

    • Proposed as answer by Wendy Jiang Friday, May 19, 2017 11:21 AM
    Thursday, May 11, 2017 2:45 AM
  • I can upgrade manually, the problem is that it won't work through WSUS.
    Thursday, May 11, 2017 12:19 PM
  • If you are going to deploy upgrades from Windows 10 to Windows 10 latest streams there are 3 things you need to do.

    1. In Products/Classifications, make sure to check off the Upgrades box or Windows 10 will not be available to deploy.
    2. You also will need to add a MIME type for *.esd as application/octet-stream at the top level in IIS.
        To do this: Open IIS Manager > Select the server name > From the "IIS" section in the centre of IIS Manager, open "MIME Types" > Click "Add…" >
        File Mame Extention: = .esd
        MIME type: application/octet-stream
    3. Install KB3159706 which should come as a regular Windows update on the WSUS 2012 or 2012 R2 Server. Then you need to perform the extra manual steps that are well documented here: https://support.microsoft.com/en-us/help/3159706/update-enables-esd-decryption-provision-in-wsus-in-windows-server-2012-and-windows-server-2012-r2 - Perform ALL OF THE STEPS including the ones for SSL (which is Microsoft's best practice anyways).
    • Proposed as answer by Wendy Jiang Friday, May 19, 2017 11:21 AM
    • Marked as answer by Vlado84 Wednesday, June 14, 2017 2:41 PM
    Saturday, May 13, 2017 3:51 AM
  • Hi,

    Just checking in to see if the information provided was helpful. And if the replies as above are helpful, we would appreciate you to mark them as answers, please let us know if you would like further assistance.

    Best Regards,

    Wendy


    Please remember to mark the replies as answers if they help.
    If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com

    Friday, May 19, 2017 11:22 AM