Windows 10 to Windows 11 upgrade using Wsus

Question

Windows 10 to Windows 11 upgrade using Wsus

Joe Fly 21

Hi, I'm upgrading Windows 10 22H2 clients to Windows 11 24H2 using WSUS server. The update (named Windows 11 version 24H2 x64 2025-02B) is downloaded on clients. However it is not installed. When i try to install it using powershell using commands Get-WindowsUpdate -Install -AcceptAll or Install-WindowsUpdate -AcceptAll -AutoReboot, the System reboots but Windows 11 upgrade is not installed.

When i click button Install now On Windows Update screen the update installs normally. Why powershell commands are not working. I can't log in remotely to 3000+ machines to click install now button.

3 answers

Your answer

Answer 1

The client might be missing something, a prerequisite of some kind. What does WSUS say is 'NEEDED' for these systems? Under the heading: The Approvals Process; Without Drivers

https://www.ajtek.ca/wsus/how-to-setup-manage-and-maintain-wsus-part-6-selecting-your-test-systems-the-approvals-process/

Remember, it's the client that does all the work, WSUS is just the repository of updates and files.

You may also need to run a wsusutil reset as something may be missing at the WSUS side (unlikely, but possible).

https://www.ajtek.ca/wsus/what-does-a-wsusutil-reset-do-and-when-should-i-run-a-wsusutil-reset/

Answer 2

Adam J. Marshall 10,356 MVP

Ensure your GPO policies are set properly. The ones in part 4 of my guide 100% WORK with upgrades. Approve the upgrade and sit back and relax.

https://www.ajtek.ca/wsus/how-to-setup-manage-and-maintain-wsus-part-4-creating-your-gpos-for-an-inheritance-setup/

Answer 3

Alex Burlachenko 10,565

Hey Joe,

WSUS is kinda weird sometimes. The PowerShell commands u’re using might not be triggering the full upgrade process like the "Install now" button does. That button does extra stuff behind the scenes, like pre-checks and setup prep, which the commands might be skipping. Also, some PS commands for updates don’t handle big upgrades like Win10 to Win11 properly they’re more for regular patches. Try using Start-WUScan and Install-WUUpdates from the PSWindowsUpdate module instead. If that still doesn’t work, u might need to push a script or GPO to force the upgrade. Or, u could use something like SCCM if u got it, ‘cause it’s better at handling big upgrades like this.

Good luck with those 3000+ machines. Sounds like a nightmare!

rgds,

Alex

Joe Fly 21 Reputation points

2025-02-25T11:46:27.0433333+00:00

Unfortunately, we don't have SCCM. Also Start-WUScan and Install-WUUPdates did not help (already tried before). What kind of script/GPO did you have in mind ?
Alex Burlachenko 10,565 Reputation points

2025-02-25T15:18:35.28+00:00
GPO.... (at one of yours DC of coz)

Open the Group Policy Editor

Open Group Policy Management (gpmc.msc) on the domain controller.

Navigate to Group Policy Objects, right-click -> New, name it, something like Upgrade_Win10_to_11_24H2.

Open the Policy Editor

Right-click Upgrade_Win10_to_11_24H2 -> Edit.

Navigate to: Computer Configuration ->Administrative Templates -> Windows Components -> Windows Update -> Manage updates offered from Windows Update

Configure Automatic Update Settings

Select the target feature update version

Double-click -> Enabled

In the Product Version field, enter: Windows 11

In the Target Version for Feature Updates field, enter: 24H2

Click OK

Configure Automatic Updates

Double-click -> Enabled

In the Configure automatic updating section, select Option 4 – Auto download and schedule the install

In the Scheduled install day section, choose a suitable time (e.g., 03:00 AM).

Click OK

(Optional) Allow Installation on Unsupported Hardware

Allow upgrades with unsupported TPM or CPU

Double-click -> Enabled -> OK

Apply the Policy to Computers

In Group Policy Management, right-click on the OU containing the target computers (e.g., Workstations).

Select Link an Existing GPO... -> choose Upgrade_Win10_to_11_24H2.

Apply and Verify the Policy on Clients

On a client PC, open Command Prompt as Administrator and run: gpupdate /force

Restart the PC.

Check the update status using PowerShell: Get-WindowsUpdateLog

Ensure that the update Windows 11 24H2 x64 2025-02B is installed.

The policy should now automatically upgrade Windows 10 22H2 to Windows 11 24H2.

I hope it will work for u.

rgds,

Alex
Adam J. Marshall 10,356 Reputation points MVP

2025-02-25T15:30:49.62+00:00

This ONLY WORKS if you are using Windows Update for Business. The PATH should be giving you this hint.

Navigate to: Computer Configuration ->Administrative Templates -> Windows Components -> Windows Update -> Manage updates offered from Windows Update

WSUS doesn't care which is also why they've moved the navigation to

Navigate to: Computer Configuration ->Administrative Templates -> Windows Components -> Windows Update -> Manage updates offered from Windows Server Update Service

For WSUS - you need to follow my directions.
Adam J. Marshall 10,356 Reputation points MVP

2025-02-25T15:32:07.9466667+00:00

Also, managing GPO from WITHIN the DC is not recommended. RSAT tools should be installed on a workstaiton computer and then you just open GPMC.msc from within that workstation and it will auto-connect to the PDC Emulator role DC. You can then change that if needed to another DC.
Joe Fly 21 Reputation points

2025-02-26T13:03:37.17+00:00

@Alex, similar WSUS policy is already in place. I failed to mention in original post that updates are downloaded and installed. However after reboot upgrade is not applied to clients. When i click reboot button in Windows Update screen upgrade is executed and applied to client computers. Neither version of Powershell command works. I literally need to log in to every computer and click "Restart Immediately" button on Windows Update screen. I think the reason it is likely not succeeding is that powershell commands are for Windows Updates only and not upgrades. It would be useful to know what is executed in background when you click "Restart Immediately" button.

@Adam we do not use Windows Update For Business. There is 3000+ workstations, and I presume that enabling Windows Update for business would clog our internet link.
Alex Burlachenko 10,565 Reputation points

2025-02-26T13:19:51.0633333+00:00

Dear Joe Fly, I’ve thrown everything into the mix, I hope at least something helps you. Honestly, it’s just small tweaks left that you can fine-tune now. You’re doing great!

Try the Invoke-WUJob Script:

Use the Invoke-WUJob script from the PSWindowsUpdate module. This script can handle both updates and upgrades and can force a restart if needed.

Install-Module PSWindowsUpdate -Force

Invoke-WUJob -Script {Install-WindowsUpdate -AcceptAll -AutoReboot}

Use the Start-OSUninstall or Start-OSUpgrade Commands:

For upgrades, you might need to use specific commands like Start-OSUninstall or Start-OSUpgrade

Check for Pending Reboots Use PowerShell to check if the system is in a pending reboot state

Get-ItemProperty -Path "HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\RebootRequired"

If this key exists, it means a reboot is pending to complete the upgrade.

Force a "Special" Restart, the shutdown command with the /r /o flags to force a restart that includes pending upgrades

shutdown /r /o /t 0

Log What Happens During "Restart Immediately": Use tools like Process Monitor or PowerShell logging to capture what happens in the background when you click "Restart Immediately."

Please click Accept Answer and upvote if the above was helpful.

rgds,

Alex
Alex Burlachenko 10,565 Reputation points

2025-02-26T13:21:00.5933333+00:00

Dear Joe Fly, I’ve thrown everything into the mix, I hope at least something helps you. Honestly, it’s just small tweaks left that you can fine-tune now. You’re doing great!

Try the Invoke-WUJob Script:

Use the Invoke-WUJob script from the PSWindowsUpdate module. This script can handle both updates and upgrades and can force a restart if needed.

Install-Module PSWindowsUpdate -Force

Invoke-WUJob -Script {Install-WindowsUpdate -AcceptAll -AutoReboot}

Use the Start-OSUninstall or Start-OSUpgrade Commands:

For upgrades, you might need to use specific commands like Start-OSUninstall or Start-OSUpgrade

Check for Pending Reboots Use PowerShell to check if the system is in a pending reboot state

Get-ItemProperty -Path "HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\RebootRequired"

If this key exists, it means a reboot is pending to complete the upgrade.

Force a "Special" Restart, the shutdown command with the /r /o flags to force a restart that includes pending upgrades

shutdown /r /o /t 0

Log What Happens During "Restart Immediately": Use tools like Process Monitor or PowerShell logging to capture what happens in the background when you click "Restart Immediately."

Please click Accept Answer and upvote if the above was helpful.

rgds,

Alex
Adam J. Marshall 10,356 Reputation points MVP

2025-02-26T14:49:35.52+00:00

@Joe Fly I was responding to Alex's messages - I know you're not using WUfB. I was mentioning this because Alex's responses won't work for you. Follow my guides instead and you'll be able to get it working without too much trouble. Doing it my way will allow you to sit back, relax, and enjoy each supported computer upgrade successfully. I'm confident it has to do with your GPOs and/or a prerequisite that is missing (and a slight chance you need to run the wsusutil reset). See my responses below.

Share via

Windows 10 to Windows 11 upgrade using Wsus

3 answers

Your answer