This browser is no longer supported.
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(304, 93%, 39%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EDH%3C/text%3E%3C/svg%3E)
Since KB5003173 was release in May there has been an issue with current CU not including the required SSU to be installed.
Is this going to be fixed in upcoming updates? This is an issue because current updates supersedes this update but they cannot be installed as the SSU in the May update is a pre-requisite.
This is creating issues for organizations that use WSUS as current updates are downloaded to client machines from the WSUS server and fail to install because the SSU version is incorrect.
If an update is cumulative it need to include the SSU update required to install itself.
Articles for reference on the issue.
https://redmondmag.com/articles/2021/06/24/windows-security-patch-blocked.aspx
https://techcommunity.microsoft.com/t5/configuration-manager-blog/known-issue-the-june-2021-windows-10-security-update-is-reported/ba-p/2471737
Microsoft released a separate SSU yesterday that takes care of this issue.
KB5005260 - https://support.microsoft.com/en-us/topic/kb5005260-servicing-stack-update-for-windows-10-version-2004-20h2-and-21h1-august-10-2021-ec4c5daa-2cec-4b06-be93-037f150fe3ba
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(297.6, 24%, 38%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ERH%3C/text%3E%3C/svg%3E)
@David Henderson
In my opinion, whether the clients download and install the updates depend on the Windows Update Agent. It has nothing to do with WSUS role. Please try to approve the KB5003173 for the clients first.
In addition, I tested it in my lab environment. Here are the screenshots for your reference:
The KB5003173 shown Declined on the WSUS console:
But I tried to approve it for the windows 10 2004 client. I'm sorry that there is no such windows 10 20h2 client for test. But the windows 10 2004 client downloaded and installed the update successfully:
Regards,
Rita
If the response is helpful, please click "Accept Answer" and upvote it.
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.