Windows 10 June Updates (20H2) count error

Question

I've never seen this before. SCCM is under reporting the number of devices requiring the June 2021 update significantly. We currently have 253 windows 10 20H2 devices, but for the June update it states only 5 need it and 0 have it installed. Screen shots included. You can see that a previous Windows 10 20H2 update is more accurate.

Answer 1

Hi, @Daniel Kaliel
Thank you for posting in Microsoft Q&A forum.
Did you just sync this update? The evaluation process for clients takes a long time, you may wait for some time to see the result.
Also we can check the statistics in the lower right corner, how many device show "Not Required" and "Unknown"?
If most device in Unknown states, we may need the further troubleshooting.

---

If the response is helpful, please click "Accept Answer" and upvote it.
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

Answer 2

Further to this, when I check Windows Update from my test laptop it shows the Update is required.

But it does not show up on the list for SCCM.

Where can I look next to solve this issue as it has now been nearly a week and we still don't have a proper required count.

Answer 3

Hi, @Daniel Kaliel
Most of your clients show "Not Required" for this update, because the KB5003637 is replaced by KB5004476, SCCM will think the replaced update is not required, but it can be installed on client manually and windows update will think it is required.
So, we should deploy KB5004476 for your clients now.

Answer 4

To keep things clean we had SCCM configured to immediately expire superseded updates. So when update KB5003637 was released and subsequently update KB5004476 update KB5003173 was expired.

When you read the articles for updates KB5003637 and KB5004476 you see they state the following:

If you use Windows Server Update Services (WSUS) to manage and deploy your monthly cumulative updates, you must install the May 11, 2021 update (KB5003173) before you install the latest cumulative update.

Because SCCM uses WSUS KB5003173 is required for KB5003637 and KB5004476 but because both KB5003637 and KB5004476 superseded update KB5003173 and the update was expired we were unable to deploy updates KB5003637 and KB5004476.

So first I went and changes the SCCM rules to not expired superseded updates for 4 months. Then I went into WSUS and imported KB5003173 into WSUS. Then I ran a Synchronization is SCCM.

Answer 5

Hi, @Daniel Kaliel
Thank you very much for the update and we believe you can install the latest CU after install the KB5003173.
By the way, why do you miss the cumulative updates of May? Don't you use an ADR for the Patch Tuesday?
Then you could accept the useful reply as answer for this thread, thanks.