Hello. We are running WSUS on Windows Server 2019. Not config manager. It's been working well for a good line time for approving security updates on our Windows 10 LSTC systems. I've begun investigating the options for approving the Windows 11 upgrade using WSUS and am running into some issues. First, it appears that WSUS by default is offering a pre-release build of Windows 11. Anyone know what is up with that? Second, even though it is approved and the test Windows 10 client sees the available update, it fails to download. We don't cache any updates on the WSUS server, all clients are sent to the internet for download. See screenshots for more info.

The error likely has to do with UUP https://www.ajtek.ca/guides/how-to-prepare-for-on-prem-wsus-uup-updates/ I'm not sure why it would need it as you're not downloading the update from WSUS, but it would be a good thing to check to see if that resolves the error. 05D = May Update, D release - or preview release in week 4 of the month. 24H2 = Insider Build as it's not GA - does that computer have Windows Insider enabled? You should have 23H2-05B available to approve instead. https://www.ajtek.ca/wsus/how-to-setup-manage-and-maintain-wsus-part-3-windows-as-a-service-waas-and-group-policy-administrative-templates/

WSUS and Windows 10 to 11 update failures

Accepted answer

Adam J. Marshall 9,121 Reputation points MVP

2024-06-01T02:23:53.3466667+00:00

The error likely has to do with UUP

https://www.ajtek.ca/guides/how-to-prepare-for-on-prem-wsus-uup-updates/

I'm not sure why it would need it as you're not downloading the update from WSUS, but it would be a good thing to check to see if that resolves the error.

05D = May Update, D release - or preview release in week 4 of the month.

24H2 = Insider Build as it's not GA - does that computer have Windows Insider enabled?

You should have 23H2-05B available to approve instead.

https://www.ajtek.ca/wsus/how-to-setup-manage-and-maintain-wsus-part-3-windows-as-a-service-waas-and-group-policy-administrative-templates/
Please sign in to rate this answer.
AdamTyler-3590 275 Reputation points

2024-06-03T15:51:33.91+00:00

Thank you. So we investigated this MIME type concern already. We also thought it was strange that it would be the problem since no updates are stored on our WSUS server. Didn't seem to help. The WSUS server is currently running....

No I do not have the insider program enabled on this workstation, I have no idea why an operating system that hasn't been officially released is the only option for approval in WSUS.

The client system is running Windows 10 LTSC.

Not sure how I would find 23H2-05B and approve it for a system where it doesn't detect that it is needed? Perhaps I need to decline the insider build version?

Regards,
Adam Tyler

AdamTyler-3590 275 Reputation points

2024-06-03T16:03:10.54+00:00

I attempted to decline this update and now no Windows 11 upgrade seems to be available to approve on this workstation at all.

Also, I did find this setting buried in the "Products and Classifications", Windows section of the WSUS settings. Have then unchecked now.

Adam J. Marshall 9,121 Reputation points MVP

2024-06-03T16:32:40.0833333+00:00

If you had a licence for WSUS Automated Maintenance (our product), you can remove the Windows Insider Dev Channel as it was accidentally pushed out by Microsoft in 2022 or 2023. WAM has a Remove-WsusProduct cmdlet and a notice for this to let you know that you can remove it.

Adam J. Marshall 9,121 Reputation points MVP

2024-06-03T16:38:08.02+00:00

For finding the upgrade 23H2-05B

You should make sure you have the upgrades classification and the appropriate product selected.

Then you should have the ability to create an upgrades view (https://www.ajtek.ca/wsus/how-to-setup-manage-and-maintain-wsus-part-2-computer-groups-update-views/) and see the upgrade.

AdamTyler-3590 275 Reputation points

2024-06-03T16:50:40.7466667+00:00

Thanks. I did find the upgrades view in WSUS and all of the Windows 11 builds appear to be listed. Only trouble is that out of our 600 or so systems, WSUS only seems to think a single PC is eligible. I am thinking this might be because we run the LTSC version of Windows 10 everywhere. Perhaps an in-place upgrade from WSUS on LTSC isn't supported?

Adam J. Marshall 9,121 Reputation points MVP

2024-06-04T02:06:37.64+00:00

LTSC does not support ANY upgrades - you must perform them all manually.

Microsoft has often said, if the system needs Office installed on it, (because users will need Office to do their job), don't install LTSC and instead use the mainstream version of Windows (used to be called SAC for semi-annual channel, but now is just annually).

AdamTyler-3590 275 Reputation points

2024-06-07T18:57:01.5266667+00:00

Thanks for confirming LTSC can't be updated using WSUS. This must be my problem. Any chance you have a reference directly from Microsoft stating this?

Adam J. Marshall 9,121 Reputation points MVP

2024-06-07T20:48:54.6533333+00:00

Can't find one that directly says that....

But review MS's official stance on WHERE to install LTSC - Pink and Blue notes.

https://learn.microsoft.com/en-us/windows/whats-new/ltsc/overview

AdamTyler-3590 275 Reputation points

2024-06-07T21:05:52.25+00:00

Thanks. I am fully aware of the M$ recommendation here. We have LTSC installed on every workstation in our org, about 600. We've only ever had to deal with applying security updates and it has been amazing.

Now that the industry is getting used to constant in place OS upgrades being pushed from M$, we are just starting to considering using the Non LTSC version of Windows 11. Mostly because LTSC Windows 11 isn't available though.

I recall being concerned early on when Windows 10 first dropped, and we decided to use LTSC. It was called LTSB at the time. I thought, "what if a critical app was only available via the Windows store?". That was never a problem.

Regards,
Adam Tyler
Sign in to comment

Share via

WSUS and Windows 10 to 11 update failures

0 additional answers