New WSUS Update Downloads Failing

Question

Greetings,

Have a fresh installation of Windows Server 2022 Standard installed on a VM connected to the Internet. Installed WSUS. Finally got my database synchronized with Microsoft and now I am at approving updates.

So can someone please tell me every month when I go to download the latest cumulative updates and the latest Windows Feature build such as Windows 11 23H2-04B, the update downloads up to about 85%-90% and then stops.

My downloads on WSUS show something like 5,800,000 of 6,500,000MB. If I look at the update it will show as still downloading. If I cancel the download and restart it or do one at a time it will do this for each new update.

This will include for example this month

2024-09 Cumulative Update for Microsoft windows server 23H2 for x64-based Systems
2024-09 Cumulative Update for Windows 11 24H2 for x64-based Systems
2024-09 Cumulative Update for Windows 11 23H2 for x64-based Systems
2024-09 Cumulative Update for Windows 11 24H2 for x64-based Systems
Windows Version 23H2 x64 based 2024-09B

THIS HAPPENS EVERY MONTH. I CAN'T COMPLETE THESE DOWNLOADS.

What at Microsoft is preventing me from getting these files? Do they live behind a specific server I can't reach completely? Or do I have something not configured correctly? Because every other update has downloaded correctly.

BITS log shows that it is getting errors from Microsoft.

Error Code: 0x8020002e - The Connection was closed prematurely.
Error Context: 0x00000005 - The error occurred while the remote file wasbeing processed.

Is this happening because Microsoft is closing the connection?

Answer 1

Hello

Microsoft has not blocked users from obtaining update files in any way, or there are specific servers that cannot be accessed. It is recommended that you check WSUS and network issues, including the following points:

Configuration Issues: Misconfiguration of the WSUS server can cause download issues. Double-check the synchronization settings, update classifications, and languages to ensure they are correctly configured.

Firewall or Network Connectivity: Ensure that the WSUS server has the necessary network connectivity to reach the upstream update source. Check if any firewalls or network restrictions are blocking the WSUS server's access to the internet.

Permissions and Access Rights: Verify that the WSUS service account has appropriate permissions to access the content directory and download updates. Check the security settings on the content directory.

BITS Issues: Background Intelligent Transfer Service (BITS) is used by WSUS to download updates. Ensure that BITS is running properly on all affected computers.

Update Metadata Mismatch: Sometimes, if the metadata of the exported updates does not match the metadata expected by the WSUS server, it can cause issues with downloading the updates.

Reference Documentation:

Standalone WSUS server updates stuck in downloading status - Microsoft Q&A

Answer 2

Hello

Microsoft has not blocked users from obtaining update files in any way, or there are specific servers that cannot be accessed. It is recommended that you check WSUS and network issues, including the following points:

Configuration Issues: Misconfiguration of the WSUS server can cause download issues. Double-check the synchronization settings, update classifications, and languages to ensure they are correctly configured.

Firewall or Network Connectivity: Ensure that the WSUS server has the necessary network connectivity to reach the upstream update source. Check if any firewalls or network restrictions are blocking the WSUS server's access to the internet.

Permissions and Access Rights: Verify that the WSUS service account has appropriate permissions to access the content directory and download updates. Check the security settings on the content directory.

BITS Issues: Background Intelligent Transfer Service (BITS) is used by WSUS to download updates. Ensure that BITS is running properly on all affected computers.

Update Metadata Mismatch: Sometimes, if the metadata of the exported updates does not match the metadata expected by the WSUS server, it can cause issues with downloading the updates.

Reference Documentation:

Standalone WSUS server updates stuck in downloading status - Microsoft Q&A

Answer 3

Run a wsusutil reset

https://www.ajtek.ca/wsus/what-does-a-wsusutil-reset-do-and-when-should-i-run-a-wsusutil-reset/

Answer 4

Also make sure your firewall is configured to allow the required sites

https://learn.microsoft.com/en-us/windows-server/administration/windows-server-update-services/deploy/2-configure-wsus#211-configure-your-firewall-to-allow-your-first-wsus-server-to-connect-to-microsoft-domains-on-the-internet