One of the LCU got installed on the server but as a SCCM Admin I have not approved it. So from where it got installed

Question

HI Team,

I have one of the Windows Server 2019 VM which was in place upgraded in the month of 11/2023 last year, but in the month of February 2024 I could see one of the update (KB5035963) got downloaded on it and got installed on March 2024. As a SCCMADMIN, I have not approved this KB neither I could see it under my config manager console. However upon troubleshooting I could see a path on VM with location C:\Windows\Servicing\LCU\PackageForServicingStack.....\17763.5568.1.2\ created on a VM.

Any idea from where this could get downloaded or created? I do not see any log in Windows Update log file or any log file of sccm client.

Any help is appreciated.

VM1.jpg

Answer 1

Hello,

This udpate KB5035963 is a SSU which is the prerequsite to install further monthly updates, so amybe it is install together with other cumulative updates.

There is also another possibility that user manually downloaded it. Even the machine update is managed by WSUS, sometimes user still can manually install update, for example, click setting/ windows udpate/ check online for updates. This option will let the machine directly download update from Internet instead of the wsus server.

Best regards,

Molly

============================================

If the Answer is helpful, please click "Accept Answer" and upvote it