Please if check some End Point system OS updates are required by these clients in WSUS console, as per this following screenshot:
If they are required, we could check WindowsUpdate.log to see any error in it, which is located under the Windows installation folder at %windir%WindowsUpdate.log
If the answer is the right solution, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.