WSUS not show updates to install

Question

Hi,
I have configured WSUS, in Products I have checked "Windows 10" and my Windows Servers 2012, 2016, 2019.
Now I see that on WSUS page neither critical nor security updates are available,

when I click on client computer check updates then I have System is Up to date.
But when I click check updates in Windows Update Online, then computer start to download new security patches.

Second example:

Windows 2012 R2 not connected to WSUS, report now that two security patches are ready to download:

Windows Server 2012 R2 connected to WSUS do not have any updates available:

Answer 1

Hi,
I Unapproved all updates, then deleted content on "WsusContent" folder, now my WSUS folder is empty.
Now I'm manually do approval of updates, but on main WSUS screen where download status is, it do not download any manually approved packeges.
I have all the time 0 files needed for download:

When I enable in column "File Status" then I see that WSUS showing that all Not approved packages are already on disk, but they aren't (I removed it):

Looks like that WSUS database think that packages are on disk, but I deleted it so there is a problem.

Answer 2

You need to perform a wsusutil reset - follow the parts regarding the WsusContent folder here:

https://www.ajtek.ca/wsus/what-do-i-do-when-i-run-out-of-space-on-a-wsus-server/

Answer 3

After I did this command wsusutil reset. I do not have any updates from computers, on main screen where updates are shown, these update numbers do not change at all, 24 hours later I have exact the same numbers. Earlier before I removed WsusContent folder and did wsusutil reset command, these numbers was updated.

Answer 4

My question then goes to "Are the clients actually reporting properly to WSUS?"

https://www.ajtek.ca/wsus/client-machines-not-reporting-to-wsus-properly/

Answer 5

@Tutek
The clients which enabled the Do not allow update deferral policies to cause scans against Windows Update policy will prevent scanning updates from Internet. It will be helpful if you configure the WSUS server on the internal environment.

In addition, according to your issue, I just want to confirm the following questions:

1. Please help to confirm whether all the clients showing on the WSUS console report correctly.
2. Please help to approve the latest and needed cumulative updates and service stack updates for the clients first. Here are several reference picture for your to approve the needed updates:
   

I'm sorry that the reference picture is used for windows 8.1. All the needed updates in windows 10 are approved on my environment.

In fact, the security updates is cumulative in windows 10. So we could approve the latest cumulative updates and all the superseded updates will be included.

Regards,
Rita

---

If the response is helpful, please click "Accept Answer" and upvote it.
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.