Windows update error 0x80244017 wsus server

Question

I have multiple computer in my domain (EC2 instances in AWS account) which are getting updates from wsus server. But A newly created computer having a problem receiving updates from wsus server. I have tried multiple methods but no success so far. Does anyone know how to resolve this. Rest all servers are receiving update from the same WSUS without any problem. Following is the error that I am getting

OS : Windows Server 2019 Datacenter 64-bit (10.0, Build 17763)

install-windowsupdate -verbose

VERBOSE: Terminal-Host-1 (11/6/2025 1:51:50 AM): Connecting to Windows Server Update Service

(http://my-wsus.local:8530) server. Please wait...

install-windowsupdate : Same as HTTP status 401 - the requested resource requires user authentication.

At line:1 char:1

+ install-windowsupdate -verbose

+ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

**+ CategoryInfo          : CloseError: (:) [Get-WindowsUpdate], Exception**

**+ FullyQualifiedErrorId : 0x80244017,PSWindowsUpdate.GetWindowsUpdate**

Answer 1

Hello,

Thank you for the detailed error information.

Since your other servers are working fine, this points to a problem specific to this new machine's identity or its communication with the domain, rather than an issue with the WSUS server.

If the EC2 instance was created from an image that was not properly generalized (sysprep), it may have a duplicate SUSClientID as another machine on the network. WSUS requires every client to have a unique ID.

1. Open PowerShell as an Administrator on the problematic server.
2. Run the following commands one by one. This will stop the service, delete the registry key, restart the service, and force it to report to the WSUS server to generate a new ID.

      # Stop the Windows Update Service
      Stop-Service -Name wuauserv
      # Remove the registry keys associated with the client ID. 
      Remove-ItemProperty -Path "HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate" -Name "SusClientId" -Force -ErrorAction SilentlyContinue
      Remove-ItemProperty -Path "HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate" -Name "SusClientIdValidation" -Force -ErrorAction SilentlyContinue
      # Restart the Windows Update Service
      Start-Service -Name wuauserv
      # Force the client to check in with the WSUS server and generate a new ID
      UsoClient.exe StartScan
   

3. Try running your Install-WindowsUpdate command again.