locked
Worstations not getting updates from WSUS, but will from MS RRS feed

  • Question

  • We are 100% Win 10, I've noticed that the number of patches pending in the WSUS console has not bee going down, so went to investigate.

    Workstations are checking in to the WSUS server, the console shows the Last Contact and the Last Status Report as the current dates.  Running a report on any PC will list the pending updates and that they are Approved.  However, updates are not happening.

    Went to several PCs.  On each one went to the Windows Update screen and clicked on Check for updates, which goes to the WSUS server but tells me the "You're up to date".  Then I click on the 'get updates from Microsoft' and it will go and install all the updates that are pending for that PC.

    Tried this as end users and as administrators with no changes.  We have not made any changes to WSUS, PCs or GPOs in months so I just don't know where to go looking to solve this.

    Tuesday, October 30, 2018 4:31 PM

Answers

  • Hi,

    Based on the question, we should pay attention on the following issues:
    >Check the update in the WSUS havs already downloaded.
    >Check whether the firewall block the connection. We can trun off the firewall temporary to test.   
    >Check the GPO seetings for the updates soure location.
    >If the problem still exits, please check the windowsupdate.log

    Best regards,
    Johnson
    =====================
    Please remember to mark the replies as answers if they help. If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com.
    • Marked as answer by Taz_1 Friday, November 2, 2018 6:49 PM
    Wednesday, October 31, 2018 2:36 AM

All replies

  • Hi,

    Based on the question, we should pay attention on the following issues:
    >Check the update in the WSUS havs already downloaded.
    >Check whether the firewall block the connection. We can trun off the firewall temporary to test.   
    >Check the GPO seetings for the updates soure location.
    >If the problem still exits, please check the windowsupdate.log

    Best regards,
    Johnson
    =====================
    Please remember to mark the replies as answers if they help. If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com.
    • Marked as answer by Taz_1 Friday, November 2, 2018 6:49 PM
    Wednesday, October 31, 2018 2:36 AM
  • Are you performing the proper WSUS maintenance including but not limited to running the Server Cleanup Wizard (SCW), declining superseded updates, running the SQL Indexing script, etc.?

    https://www.ajtek.ca/wsus/how-to-setup-manage-and-maintain-wsus-part-8-wsus-server-maintenance/

    Adam Marshall, MCSE: Security
    https://www.ajtek.ca
    Microsoft MVP - Windows and Devices for IT

    Friday, November 2, 2018 4:30 AM
  • Thanks Johnson,

    We looked at the workstations and had turned off the Win 10 firewall with no change.

    When we went to check on WSUS downloading the patches, found that the disk was full.  Extending the partition and letting the server sync overnight seems to have solved the issue.

    Sorry for the delay to post the followup, but it took time to schedule and then test the fix.

    Thanks again!

    • Proposed as answer by robcandersonnj Friday, November 2, 2018 6:52 PM
    Friday, November 2, 2018 6:45 PM
  • Hi Adam,

    Thanks for replying. 

    We've tried the SCW in the past without much visable change, so overall we've been negligent on the cleanup side.

    This issue was caused by running out of disk space, but we'll be reading through your link and looking at improving our care and feeding of our WSUS server.

    Thanks!

    Friday, November 2, 2018 6:48 PM