WUServer and WUStatusServer Registry Settings Ignored by WUA

Question

Hi Team,

Recently we are facing with very unexpected problem, where on few of the Windows OS machine (mostly running server 2012, server 2016 and Windows 10) are not detecting and installing Windows Update from configured WSUS server as per below registry settings. We also tried configuration from group policy and resetting the Windows Update Component (restarted all WU services), still Windows Update Agent as per WindowsUpdate.log goes to internet Microsoft Update server for searching the missing Windows updates. Registry configured settings for Custom WU server as below:
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate]
"WUASettingsChanged"=dword:00000001
"WUServer"="http://10.10.7.89:8530"
"WUStatusServer"="http://10.10.7.89:8530"
"UpdateServiceUrlAlternate"="http://10.10.7.89:8530"
"DoNotEnforceEnterpriseTLSCertPinningForUpdateDetection"=dword:00000001
"SetProxyBehaviorForUpdateDetection"=dword:00000001
"AcceptTrustedPublisherCerts"=dword:00000001
"DisableWUfBSafeguards"=dword:00000001

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU]
"NoAutoRebootWithLoggedOnUsers"=dword:00000001
"NoAutoUpdate"=dword:00000001
"DetectionFrequencyEnabled"=dword:00000000
"UseWUServer"=dword:00000001
"AUOptions"=dword:00000002

Is there any issue with Microsoft WUA component for this or any other kind of environment issue?

Please suggest the fix or any workaround for this.

Best Regards,
Sunil Pagare

Answer 1

From an Administrative Command Prompt on an affected client, run the following:
gpresult /h gpo.htm
and share the result with your favourite method or pastebin it so that we can see it.

Answer 2

It is likely environmental.

Dual Scan comes to mind
https://www.ajtek.ca/wsus/dual-scan-making-sense-of-why-so-many-admins-have-issues/

Also, use this to troubleshoot - work from the top to the bottom.
https://www.ajtek.ca/wsus/client-machines-not-reporting-to-wsus-properly/

Answer 3

Hi, @Sunil Pagare

Thank you for posting in Microsoft Q&A forum.

It looks like dual scan like Adam said, you may try to enable the policy "Do not allow update deferral policies to cause scans against Windows Update" for the client machines.

---

If the answer is the right solution, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

Answer 4

Hi @AllenLiu-MSFT , @Adam J. Marshall

Thanks for your inputs. We confirmed that there is no group policy configured regarding Windows Update, WUB. This issue is occurring only on 2 to 3 machines.