Device alerts
Important
The information in this article or section only applies if you have Windows Enterprise E3+ or F3 licenses (included in Microsoft 365 F3, E3, or E5) licenses and have activated Windows Autopatch features.
Feature activation is optional and at no additional cost to you if you have Windows 10/11 Enterprise E3 or E5 (included in Microsoft 365 F3, E3, or E5) licenses.
For more information, see Licenses and entitlements. If you choose not to go through feature activation, you can still use the Windows Autopatch service for the features included in Business premium and A3+ licenses.
Windows Autopatch and Windows Updates use Device alerts to provide notifications and information about the necessary steps to keep your devices up to date. In Windows Autopatch reporting, every device is provided with a section for alerts. If no alerts are listed, no action is needed. Navigate to Reports > Quality update status or Feature update status > Device > select the Device alerts column. The provided information helps you understand:
- Microsoft and/or Windows Autopatch performs the actions to keep the device properly updated.
- The actions you must perform so the device can properly be updated.
Note
At any given point, one or both of these actions can be present in your tenant.
Windows Autopatch alerts
Windows Autopatch alerts are alerts specific to the Windows Autopatch service. These alerts include:
Windows quality and feature update alerts
These alerts represent data reported to the Windows Update service related to Windows quality and feature updates. These alerts can help identify actions that must be performed if an update doesn't apply as expected. Alerts are only provided by device that actively reports to the Windows Update service.
Customer and Microsoft Actions
Windows Autopatch assigns alerts to either Microsoft Action or Customer Action. These assignments give a clear understanding of who has the responsibility to remediate the alert.
| Assignment | Description |
|---|---|
| Microsoft Action | Refers to the responsibility of the Windows Autopatch service to remediate. Windows Autopatch performs these actions automatically. |
| Customer Action | Refers to your responsibility to carry out the appropriate actions to resolve the reported alert. |
Alert resolutions
Alert resolutions are provided through the Windows Update service and provide the reason why an update didn't perform as expected. The recommended actions are general recommendations and if additional assistance is needed, submit a support request.
| Alert message | Description | Windows Autopatch recommendations |
|---|---|---|
CancelledByUser |
User canceled the update | The Windows Update service reported the update was canceled by the user. It's recommended to work with the end user to allow updates to execute as scheduled. |
DamagedMedia |
The update file or hard drive is damaged | The Windows Update service indicated the update payload might be damaged or corrupt. It's recommended to run |
DeploymentConflict |
Device is in more than one deployment of the same update type. Only the first deployment assigned is effective. | The Windows Update service reported a policy conflict. For more information, see the Windows Autopatch Policy Health dashboard. If the alert persists, submit a support request. |
DeviceRegistrationInvalidAzureADDeviceId |
The device isn't able to register or authenticate properly with Windows Update because of an invalid Microsoft Entra Device ID. | The Windows Update service reported a device registration issue. For more information, see Windows Autopatch post-device registration readiness checks. If the alert persists, submit a support request. |
DeviceRegistrationInvalidGlobalDeviceId |
The device isn't able to register or authenticate properly with Windows Update because of an invalid Global Device ID. | The Windows Update service reported that the MSA Service might be disabled preventing Global Device ID assignment. Check that the MSA Service is running or able to run on device. If the alert persists, submit a support request. |
DeviceRegistrationIssue |
The device isn't able to register or authenticate properly with Windows Update. | The Windows Update service reported a device registration issue. For more information, see Windows Autopatch post-device registration readiness checks. If the alert persists, submit a support request. |
DeviceRegistrationNoTrustType |
The device isn't able to register or authenticate properly with Windows Update because it can't establish Trust. | The Windows Update service reported a device registration issue. For more information, see Windows Autopatch post-device registration readiness checks. If the alert persists, submit a support request. |
DiskFull |
The installation couldn't be completed because the Windows partition is full. | The Windows Update service reported there's insufficient disk space to perform the update. Free up disk space on the Windows partition and retry the installation. For more information, see Free up space for Windows Updates. |
DownloadCancelled |
Windows Update couldn't download the update because the update server stopped the connection. | The Windows Update service reported an issue with your update server. Validate that your network is working and retry the download. If the alert persists, review your network configuration to make sure that this computer can access the internet. For more information, see Check your network connection status. |
DownloadConnectionIssue |
Windows Update couldn't connect to the update server and the update couldn't download. | The Windows Update service reported an issue connecting to Windows Update. Review your network configuration, and to make sure that this computer can access the internet and Windows Update Online. For more information, see Check your network connection status.and Endpoints for Delivery Optimization and Windows Update. If the alert persists, submit a support request. |
DownloadCredentialsIssue |
Windows Update couldn't download the file because the Background Intelligent Transfer Service (BITS) couldn't connect to the internet. A proxy server or firewall on your network might require credentials. | The Windows Update service Windows reported it failed to connect to Windows Updates. This can often be an issue with an Application Gateway or HTTP proxy, or an issue on the client. Retry the download. Review your network configuration to make sure that this computer can access the internet. Validate and/or allowlist Windows Update and Delivery Optimization endpoint. For more information, see Check your network connection status.and Endpoints for Delivery Optimization and Windows Update. If the alert persists, submit a support request. |
DownloadIssue |
There was an issue downloading the update. | The Windows Update service reported it failed to connect to Windows Updates. This can often be an issue with an Application Gateway or HTTP proxy, or an issue on the client. For more information, see Check your network connection status.and Endpoints for Delivery Optimization and Windows Update. If the alert persists, submit a support request. |
DownloadIssueServiceDisabled |
There was a problem with the Background Intelligent Transfer Service (BITS). The BITS service or a service it depends on might be disabled. | The Windows Updates service reported that the BITS service is disabled. In the local client services, make sure that the Background Intelligent Transfer Service is enabled. If the service isn't running, try starting it manually. For more information, see Issues with BITS. If it doesn't start, check the event log for errors or submit a support request. |
DownloadTimeout |
A timeout occurred while Windows tried to contact the update service or the server containing the update's payload. | The Windows Update service reported it attempted to download the payload and the connection timed out. Retry downloading the payload. If not successful, review your network configuration to make sure that this computer can access the internet. For more information, see Check your network connection status. |
EndOfService |
The device is on a version of Windows that passed its end of service date. | Windows Update service reported the current version is past End of Service. Update device to a version that is currently serviced in Feature update overview. For more information on OS versioning, see Windows 10 release information. |
EndOfServiceApproaching |
The device is on a version of Windows that is approaching its end of service date. | Update device to a version that is currently serviced in Feature update overview. For more information on OS versioning, see Windows 10 release information. |
FailureResponseThreshold |
The failure response threshold setting was met for a deployment to which the device belongs. | The Windows Update service reported the client hit the Failure Response Threshold. Consider pausing the deployment and assess for issues. If the alert persists, submit a support request. |
FileNotFound |
The downloaded update files can't be found. The Disk Cleanup utility or a non-Microsoft software cleaning tool might remove the files during cleanup. | Windows Update reported that the update files couldn't be found, download the update again, and then retry the installation. This can often occur with third-party security products. For more information, see Virus scanning recommendations for Enterprise computers that are running Windows or Windows Server (KB822158). If the alert persists, submit a support request. |
Incompatible |
The system doesn't meet the minimum requirements to install the update. | The Windows Update service reported the update is incompatible with this device for more details please review the ScanResult.xml file in the C:\WINDOWS\PANTHER folder for "Block Type=Hard.If this is occurring on a Windows Autopatch managed device, submit a support request. |
IncompatibleArchitecture |
This update is for a different CPU architecture. | The Windows Update service reported the update architecture doesn't match the destination architecture. Make sure the target operating system architecture matches the host operating system architecture. This is not typical for Windows Update based environments. If this is occurring on a Windows Autopatch managed device, submit a support request. |
IncompatibleServicingChannel |
Device is in a servicing channel that is incompatible with a deployment to which the device belongs. | The Windows Update service reported the servicing channel on the client isn't compatible with the targeted payload. We recommend configuring the device's servicing channel to the Semi-Annual Enterprise Channel. |
InstallAccessDenied |
Installer doesn't have permission to access or replace a file. The installer might try to replace a file that an antivirus, anti-malware, or a backup program is currently scanning. | The Windows Update service reported it couldn't access the necessary system locations. Ensure no other service has a lock or handle on the Windows Update client folders and retry the installation. This can often occur with third-party security products. For more information, see Virus scanning recommendations for Enterprise computers that are running Windows or Windows Server (KB822158). |
InstalledCancelled |
The installation was canceled. | The Windows Update service reported the update was canceled by the user. It's recommended to work with the end user to allow updates to execute as scheduled. If the alert persists, submit a support request. |
InstallFileLocked |
Installer couldn't access a file that is already in use. The installer tried to replace a file that an antivirus, anti-malware, or backup program is currently scanning. | The Windows Update service reported it couldn't access the necessary system locations. Check the files under the This can often occur with third party security products. For more information, see Virus scanning recommendations for Enterprise computers that are running Windows or Windows Server (KB822158). If the alert persists, submit a support request. |
InstallIssue |
There was an issue installing the update. | The Windows Update service reported the update installation failed. If the alert persists, run " For more information, see Repair a Windows Image if the command fails. A reinstall of Windows might be required. If the alert persists, submit a support request. |
InstallIssueRedirection |
A known folder that doesn't support redirection to another drive might be redirected to another drive. | The Windows Update service reported that the Windows Update file location was redirected to an invalid location. Check your Windows Installation, and retry the update. If the alert persists, submit a support request. |
InstallMissingInfo |
Windows Update doesn't have the information it needs about the update to finish the installation. | The Windows Update service reported that another update replaced the one you're trying to install. Check the update, and then try reinstalling it. |
InstallOutOfMemory |
The installation couldn't be completed because Windows ran out of memory. | The Windows Update service reported the system doesn't have sufficient system memory to perform the update. Restart Windows, then try the installation again. If it still fails, allocate more memory to the device, or increase the size of the virtual memory pagefiles. For more information, see How to determine the appropriate page file size for 64-bit versions of Windows. |
InstallSetupBlock |
There's an application or driver blocking the upgrade. | The Windows Update service detected that an application or driver is hindering the upgrade process. Utilize the SetupDiag utility to identify and diagnose any compatibility problems. For more information, see SetupDiag - Windows Deployment. |
InstallSetupError |
Windows Setup encountered an error while installing. | The Windows Update service reported an error during installation. Review the last reported HEX error code in Quality update status report to further investigate. If the alert persists, submit a support request. |
PolicyConflict |
There are client policies (MDM, GP) that conflict with Windows Update settings. | The Windows Update service reported a policy conflict. Review the Windows Autopatch Policy Health dashboard. If the alert persists, submit a support request. |
PolicyConflictDeferral |
The Deferral Policy configured on the device is preventing the update from installing. | The Windows Update service reported a policy conflict. Review the Windows Autopatch Policy Health dashboard. If the alert persists, submit a support request. |
PolicyConflictPause |
Updates are paused on the device, preventing the update from installing. | The Windows Update service reported a policy conflict. Review the Windows Autopatch Policy Health dashboard. If the alert persists, submit a support request. |
PostRestartIssue |
Windows Update couldn't determine the results of installing the update. The error is false, and the update probably succeeded. | The Windows Update Service reported the update you're trying to install isn't available. No action is required. If the update is still available, retry the installation. |
RollbackInitiated |
A rollback was started on this device, indicating a catastrophic issue occurred during the Windows Setup install process. | The Windows Update service reported a failure with the update. Run the Setup Diagnostics Tool on the Device or review the HEX error in Quality update status report. Don't retry the installation until the impact is understood. For more information, see SetupDiag - Windows Deployment. |
SafeguardHold |
Update can't install because of a known Safeguard Hold. | The Windows Update Service reported a Safeguard Hold which applies to this device. For more information about safeguards, see Windows 10/11 release information for the affected versions. |
UnexpectedShutdown |
The installation was stopped because a Windows shutdown or restart was in progress. | The Windows Update service reported Windows was unexpectedly restarted during the update process. No action is necessary the update should retry when windows is available. If the alert persists, ensure the device remains on during Windows installation. |
VersionMismatch |
Device is on a version of Windows that wasn't intended by Windows Update. | The Windows Update service reported that the version of Windows wasn't intended. Confirm whether the device is on the intended version. |
WindowsRepairRequired |
The current version of Windows needs to be repaired before it can be updated. | The Windows Update service indicated that the service is in need of repair. Run the Startup Repair Tool on this device. For more information, see Windows boot issues - troubleshooting. |
WUBusy |
Windows Update can't do this task because it's busy. | The Windows Update service reported that Windows Update is busy. No action is needed. Restart Windows should and retry the installation. |
WUComponentMissing |
Windows Update might be missing a component, or the update file might be damaged. | The Windows Update service reported key components for Windows Update are missing. Run " For more information, see Repair a Windows Image if the command fails. A reinstall of Windows might be required. |
WUDamaged |
Windows Update or the update file might be damaged. | The Windows Update service reported key components for Windows Update are missing. Run " For more information, see Repair a Windows Image if the command fails. A reinstall of Windows might be required. |
WUDecryptionIssue |
Windows Update couldn't decrypt the encrypted update file because it couldn't find the proper key. | The Windows Update service reported it couldn't decrypt the update payload. This alert could be a network transit error and might resolve on its own. If the alert persists, validate any network Riverbeds, Application, or http proxies and retry. |
WUDiskError |
Windows Update encountered an error while reading or writing to the system drive. | The Windows Update service reported an alert reading or writing to the system disk. This alert is often a client issue with the target system. We recommend running the Windows Update Troubleshooter on the device. Retry the installation. For more information, see Windows Update Troubleshooter. |
WUIssue |
Windows Update couldn't understand the metadata provided by the update service. This error usually indicates a problem with the update. | The Windows Update service reported an issue with the Update payload. This could be a transient alert. If the alert persists, submit a support request. |