Specify source service for specific classes of Windows Updates breaks installation of .net 3.5, languages, optional features...

Question

Hi,

Since configuring the new Windows Update Policy setting "Specify source service for specific classes of Windows Updates" I am experiencing issues installing certain windows features.

.net 3.5 framework fails with 0x800f0950
languages fail with 0x800f0954

It can temporarily be solved by changing the data of SetPolicyDrivenUpdateSourceForQualityUpdates from 1 to 0, basically telling the client to download and install quality updates from microsoft update instead of WSUS, which is obviously not what I want.

So it looks like pointing SetPolicyDrivenUpdateSourceForQualityUpdates to WSUS, causes the setting Specify settings for optional component installation and component repair to no longer work.

Can this be fixed somehow?

Answer 1

There's new guidance here: https://learn.microsoft.com/en-us/windows/deployment/update/fod-and-lang-packs

Answer 2

Combining this article

https://learn.microsoft.com/en-us/windows/deployment/update/fod-and-lang-packs

with this one

https://learn.microsoft.com/en-us/windows/deployment/update/wufb-wsus

What I am reading is:

• If your clients are running Windows 11 22H2 and above, you can disable 'Specify settings for optional component installation and component repair' provided your WSUS is set up for UUP
• If your clients are running Windows 11 21H2 / Windows 10 (what about Windows Server?) you can leave 'Specify settings for optional component installation and component repair' set to download FoD from WSUS - but also either:
  • Configure 'Specify source service for specific classes of Windows Updates' to get feature and quality updates from Windows Update (hence bypassing WSUS) or
  • Do not configure 'Specify source service for specific classes of Windows Update' at all
    • If you do not configure this policy, all your updates should come from WSUS - unless you have 'deferral policies' set
    • What policies are 'deferral policies' is not defined, but it's safe to assume it includes the following - so if you want WSUS to work with FoD on Windows 11 21H2 or Windows 10, I think you must not also enable these.
      • Select when Preview Builds and Feature Updates are received (DeferFeatureUpdates, DeferFeatureUpdatesPeriodInDays, BranchReadinessLevel, PauseFeatureUpdatesStartTime)
      • Select when Quality Updates are received (DeferQualityUpdates, DeferQualityUpdatesPeriodInDays, PauseQualityUpdatesStartTime)