2 Computers not receving All the updates from WSUS 3.0 SP2

Windows 2008 SP2
SQL 2008
WSUS 3.0 SP2

Was getting a few errors on WSUS and I decided to uninstall and then reinstall

After a few days of tweaking I have all my computers contacting the WSUS server for updates.

I have two computers
1. Windows 8.1  
2. Windows 2008 R2 Server

Both of the above apply updates as do the others the problem is that these two computers never show 100%
The Windows 2008 Server has one update that does not deploy and the Windows 8.1 computer has 143 updates not deployed they are all language updates.

They are all in Install approval and status is not installed.

ran many wuauclt  /reportnow /detectnow

no change

Other updates have come in on both machines and they all apply and are installed
It is just these two

I even tried to change the approval status to removal but they still show.

How can I get these updates applied ? or Removed


LVL 23
Thomas GrassiSystems AdministratorAsked:
Who is Participating?

[Product update] Infrastructure Analysis Tool is now available with Business Accounts.Learn More

I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

JohnBusiness Consultant (Owner)Commented:
Microsoft has a site for Windows Update Troubleshooting for multiple OS. The website includes a FixIt that you can run to resolve problems.


Try that. I suggest running System File Checker afterward
Thomas GrassiSystems AdministratorAuthor Commented:

The thing is these two computers are working fine with all other updates

I think I would just like to get ride of these updates they are really not required.

If the computer where not getting any updates then that article would be great and I will save that info in case that happen in the future.

Further thoughts?
JohnBusiness Consultant (Owner)Commented:
If you can see the updates in Windows Updates, set them to hidden, and then the issue should go away. I have done this before.
Problems using Powershell and Active Directory?

Managing Active Directory does not always have to be complicated.  If you are spending more time trying instead of doing, then it's time to look at something else. For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why

DonNetwork AdministratorCommented:
Which 2 updates ??
Thomas GrassiSystems AdministratorAuthor Commented:

I attached the windowsupdate.log files of both computers.

You will see that they are excepting and applying other updates just not the ones that I mentioned before.

The One computer is a server which only has one update which is KB972493

The other is Windows 8.1 which has 143 updates all language updates.
You will see a error message it that one.

DonNetwork AdministratorCommented:
Your server is reporting "# 0 updates detected"

On the windows 8.1 with 143 updates( Which BTW are *NOT* all language updates)...I have had this happen to me where you need to deselect all but 5-10 updates and let them install in groups rather than all at once.
Thomas GrassiSystems AdministratorAuthor Commented:
Thanks for the info

Yes the server shows no updates but WSUS reports that it has one very strange
Even tho it has been recieving other updates from WSUS just fine this one is stuck somehow

For the windows 8
Wow it took me forever to assign them

Needs to be an easier way to do this than one at a time

So remove all but 5 you say?  did not realize that WSUS could not roll out that many updates

Will try that later

Any further thoughts on the server issue?
DonNetwork AdministratorCommented:
Yes the server shows no updates but WSUS reports that it has one very strange

Which update is this ?? Is it approved ??

So remove all but 5 you say?

What I said was that on this 8.1 client to install 5-10 at a time, *NOT* to remove from WSUS
Thomas GrassiSystems AdministratorAuthor Commented:

The One computer is a server which only has one update which is KB972493
Yes it is approved and ready install

On 8.1 I will change them to 5 to 10 at a time

Thoughts about the server?
DonNetwork AdministratorCommented:
Yup, that update is for an update to WSUS itself. So unless this server in question is your WSUS server, you dont need to install


Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
DonNetwork AdministratorCommented:
On 8.1 I will change them to 5 to 10 at a time

You should only need to do it a couple times before you can just allow the remainder to be installed.
Thomas GrassiSystems AdministratorAuthor Commented:

How do I remove it then?
DonNetwork AdministratorCommented:
Did you not read https://akbaraji.wordpress.com/2013/07/01/wsus-kb972493-reports-needed-unnecessarily/    ???

Where you can use one of these options.

1) Decline the update in WSUS for all groups. But you must make sure this update already installed on your WSUS Servers. This will make all server clean without notification that show the server needed that update.

2) Setup a separate group in WSUS for just your WSUS servers. Approve the update for the WSUS Servers group and not the other servers
Thomas GrassiSystems AdministratorAuthor Commented:

Off site now will check this later
Thomas GrassiSystems AdministratorAuthor Commented:

I declined all the updates the language updates not required

Now I know how to clear this up

DonNetwork AdministratorCommented:
Just to be clear you declined all 143 updates ???
Thomas GrassiSystems AdministratorAuthor Commented:

Yes that i correct I declined all 143 updates I decided they were not required
KB972493 was approved but my WSUS server does not show that it needs it but when I listed the fixes on that server KB972493 is not installed.

I will decline that update also and manually download it for the WSUS server only

I will create another Group for WSUS Server only for future issue like this.

I am using Group Policy so I will need to create a new GPO just for the WSUS server.

Thanks again for your help
DonNetwork AdministratorCommented:
FYI, a lot of those 143 updates are security updates

KB2962140 >>http://www.microsoft.com/en-us/download/details.aspx?id=42632
KB2965500>>http://www.microsoft.com/en-us/download/details.aspx?id=42565  <<Flash Player update
KB2966826>>https://support.microsoft.com/en-us/kb/2966826  << .NET Vulnerability
KB2968296>>https://support.microsoft.com/en-us/kb/2968296  << .NET Vulnerability

Just to name a few.....Again they were *NOT* language updates
DonNetwork AdministratorCommented:
Just trying to save your butt here :)
Thomas GrassiSystems AdministratorAuthor Commented:

Yes I only got rid of the language updates not needed

All others I approved
DonNetwork AdministratorCommented:
Ok, just wanted to be sure cause you did say

Yes that i correct I declined all 143 updates I decided they were not required
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Windows Server 2008

From novice to tech pro — start learning today.