Share via

Win 2019 not detecting updates from WSUS

Rudolf Praznovsky 20 Reputation points
2024-10-16T05:28:54.3066667+00:00

Hello

We have a WSUS server ran on windows 2016, it is used patch devices running Win 10, win 2016 and win 2019. I have no issue patching any of them outside of the two devices that are sitting in a cluster running win 2019 ( there is multiple win 2019 that are having no issues). They are behaving weirdly. They are visible on WSUS server and appear to be reporting but all the patches are marked as 'not applicable' on them. Even th patches that are installed on other w2k19 machines.

I tried to reset windows update components multiple times on both, rebooted the devices multiple times, tried to apply update manually and installed newest service stack I found for 2K19 windows ( it being update from 2021). I am at my wits end could you please advice me how to fix them? Why are they behaving like this?

Thank you in advance!

Windows for business | Windows Server | User experience | Other
0 comments No comments

2 answers

Sort by: Most helpful
  1. Yanhong Liu 14,325 Reputation points Microsoft External Staff
    2024-10-17T05:50:07.68+00:00

    Hello

    Thank you for posting in Q&A forum

    If another Windows server 2019 can work but this two, then it means problem may at these two windows servers 2019

    1. you can try to delete this machine at WSUS, and then let it rebuild to see if it will fix you issue
    2. you can try to import updates into WSUS by the PowerShell to see if new patch can work

    WSUS and the Microsoft Update Catalog | Microsoft Learn

    Best regards

    Yanhong

    =====================================

    If the answer is helpful, please click "Accept answer" and upvote it

    Was this answer helpful?


  2. Adam J. Marshall 10,776 Reputation points MVP
    2024-10-16T12:10:49.96+00:00

    Try UNINSTALLING the last 3 KB's in reverse order that were installed on those servers. After the restart, delete the computer from the WSUS MMC Console and run the client side script.

    https://www.ajtek.ca/wsus/client-machines-not-reporting-to-wsus-properly/

    Wait 48 hours, and then see if those machines are reporting to WSUS properly. See if they 'need' any updates.

    Have you tried running

    sfc /scannow
    DISM.exe /online /cleanup-image /restorehealth
    

    on them?

    Was this answer helpful?


Your answer

Answers can be marked as 'Accepted' by the question author and 'Recommended' by moderators, which helps users know the answer solved the author's problem.