Get Cummulative updates to go through with Automatic update setting Win 10 with Server 2016 GPO

Question

I have set up a GPO for a small group of PC's to do automatic updates. The GPO is working with with the exception of Cumulative Updates. For some reason Cumulative Updates fail to download and install. I have attached pictures of my current GPO settings. Any advice would be much appreciated. Thank you.

Answer 1

Hi,

Did you try download the update manually from one o impacted PC?

It seems that PC can't reach microsoft download site.

Please don't forget to mark helpful answer as accepted

Answer 2

Hi @Jacob Hartman, 

To narrow down the problem we need more information.

1, Are you using SCCM or WSUS to deploy updates?

To use these GPO, we must specify that Automatic Updates download updates from the WSUS server rather than from Windows Update.

Configure Automatic Updates by Using Group Policy | Microsoft Learn

Step 4 - Configure Group Policy Settings for Automatic Updates | Microsoft Learn

The GPO is working with the exception of Cumulative Updates. For some reason Cumulative Updates fail to download and install.

2, How do you confirm that the GPO is working, and the Cumulative Updates fail to download/install? Are there any screenshots or logs for our reference?

Looking forward to your feedback.

Best regards

Cherry

---

 

If the response is helpful, please click "Accept Answer" and upvote it.
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

Answer 3

Hello Jacob Hartman

It is possible that there is some update "stuck" that is preventing the installation. I would recommend to run the next maintenance in one of the affected computers in order to check if that fixes the issue. Your configuration seems right, a no visible reason why should not install the Cumulative Updates.

• Cleanup WinSxS folder: https://learn.microsoft.com/en-us/windows-hardware/manufacture/desktop/clean-up-the-winsxs-folder?view=windows-11
• Perform a DISM health check and repair: https://learn.microsoft.com/en-us/windows-hardware/manufacture/desktop/repair-a-windows-image?view=windows-11
• Manually reset Windows Update components: https://learn.microsoft.com/en-us/troubleshoot/windows-client/deployment/additional-resources-for-windows-update

Other option would be to generate the WindowsUpdate.log in and check what is exactly the error when it fails to download or install, as this could help greatly to identify further issue.

--If the reply is helpful, please Upvote and Accept as answer--