Solved

Win10 1607 and WSUS

Posted on 2016-08-03
45
79 Views
Last Modified: 2016-10-05
Hi experts.

Did anyone here connect his new win10 1607 to wsus already and was able to download the latest cumulative update?
Here, it stalls at 0% downloading.
WSUS 4 @ server 2012 R2, updates installed.
0
Comment
Question by:McKnife
  • 22
  • 17
  • 3
  • +1
45 Comments
 
LVL 90

Expert Comment

by:John Hurst
ID: 41741128
I have not used WSUS so cannot answer that.

I have read (today) that the Windows 1607 update is going out only to machines it deems acceptable. Other machines later.

My own ThinkPad X230 was on the later list (not fit for Windows 10 according the Upgrade Advisor). It was already on Windows 10 Version 1511.

So I ran the Media Creation Link and did it that way.

Are all your machines affected?  Is this (above) a possible issue.
0
 
LVL 53

Author Comment

by:McKnife
ID: 41741161
Hi.

The machines are on 1607 already. It's the first cumulative update that is being detected but not downloaded when targeting wsus. When I let them detect against the internet update servers, the update is detected and downloaded.
0
 
LVL 90

Expert Comment

by:John Hurst
ID: 41741190
I will do some looking around to see if I might assist in some way.
0
 
LVL 90

Expert Comment

by:John Hurst
ID: 41741384
The closest I could come is here:

https://www.404techsupport.com/2016/05/kb3159706-wsus/

Also, there are no updates yet for Version 1607 (I checked a couple of machines). It is getting stalled on emptiness I wonder.
0
 
LVL 53

Author Comment

by:McKnife
ID: 41742341
There are updates. The kb is 3176929
Another admin told me, for him, it downloads and installs alright from wsus, while https://community.spiceworks.com/topic/1749367-windows-10-ver-1607-having-difficulty-with-getting-updates-from-wsus?page=1#entry-6064726 tells me, there are others with the same problem.
I just installed wsus on server 2016 TP5 and it does not work, either, while your article says, it would work. Strange.
0
 
LVL 78

Expert Comment

by:David Johnson, CD, MVP
ID: 41742344
If you have already deployed Windows 10 and use Windows Server Update Services (WSUS) and/or System Center Configuration Manager servicing plans, you can get the Windows 10, version 1607 update on August 16th.https://blogs.technet.microsoft.com/windowsitpro/2016/08/02/whats-new-for-it-pros-in-the-windows-10-anniversary-update/
0
 
LVL 53

Author Comment

by:McKnife
ID: 41742666
David, I am already on 1607. What does not work is deploying the first cumulative update for it.
Did you read the thread?
0
 
LVL 90

Expert Comment

by:John Hurst
ID: 41742681
Strange.  Yes it is.  The update 3176929 shows in my Update History and was installed (on my machines) when 1607 was installed.

So then, on the machines you are dealing with, might this Update be in your Update history as well.  (I looked under Uninstall Updates)
0
 
LVL 53

Author Comment

by:McKnife
ID: 41742711
The difference might be, that you might have let setup detect updates right away when you upgraded. I deselected that to save time. So I guess for you that kb was installed together with setup.
But that won't be the problem as for the admin I talked to, it works after setup with wsus in an even lower version than I got.
0
 
LVL 53

Author Comment

by:McKnife
ID: 41742996
Progress: after retrying with another clean 1607 installation (clean as in C-L-E-A-N), paired with my 2016 WSUS, it still does not work. But I noticed that although the progress bar hangs at 0%, the updates are downloaded with the correct sizes. So it seems, there is some other problem after the download that keeps the progress bar from moving.
0
 
LVL 53

Author Comment

by:McKnife
ID: 41743074
I found it out.
What have my systems in common, that most of the world doesn't have? Answer: "no internet access".
For whatever reason, this 1607 needs internet access to use wsus correctly. Ain't that cute? As soon as I connect it to the internet gateway, it works. Then, I uninstall the update, restart, disconnect from the gateway and retry - still it won't work.

So, MS, what logic is behind this? We have WSUS, so we don't have to rely on internet update, but it won't work without internet!?
[and please note: ALL other win10 versions did not need the internet to cooperate with WSUS]

Who does the software testing? Whole department on vacation?
0
 
LVL 90

Expert Comment

by:John Hurst
ID: 41743076
Thank you for updating and for your work. Please keep us posted.
0
 
LVL 90

Expert Comment

by:John Hurst
ID: 41743082
For whatever reason, this 1607 needs internet access to use WSUS correctly  <-- I would have thought so. Why do you not have internet for the systems?
0
 
LVL 53

Author Comment

by:McKnife
ID: 41743090
We work in the defence sector and direct internet access and/or proxy internet access are strictly forbidden. We use RemoteApp browsers, only.
0
 
LVL 90

Expert Comment

by:John Hurst
ID: 41743097
Thanks for the update.   Sooner or later everything will need internet to function. That may be what the Microsoft folk were thinking. Windows 8 used to crap on the floor when it did not have internet. Windows 10 is a bit better.
0
 
LVL 53

Author Comment

by:McKnife
ID: 41743105
"Windows 8 used to crap on the floor when it did not have internet" - it did? We used 8.1 in our company for almost as long as it was out (until 10 came out). No problems.
0
 
LVL 90

Expert Comment

by:John Hurst
ID: 41743115
Windows 8 gave me more "Stopped Working" errors than anything before or since. It never broke or lost any data, but Reliability History was constantly filled with errors. I traced most of the errors to (1) trying to blend Metro with Desktop and (2) IE 11 not having internet.  Fortunately Windows 10 fixed all that and it is a very reliable system.
0
 
LVL 78

Expert Comment

by:David Johnson, CD, MVP
ID: 41743342
I did a clean install of Windows 10 and like you it sat at downloading 0%.  I gave up and reset the machine,  went back into Windows Update, Lo and behold I have updates to install.. The restart options give me a generic error message.. about having problems restarting. so I did a shutdown /r /t 0 from the command prompt. Restarted, went to working on updates.
WSUS has access to the internet, the W10 VM doesn't
0
 
LVL 53

Author Comment

by:McKnife
ID: 41743401
I restarted several times and it didn't get better offline.
0
 
LVL 78

Expert Comment

by:David Johnson, CD, MVP
ID: 41743411
I had let it sit for about 6 hours and was surprised to see the 'updates are ready to install'
0
 
LVL 53

Author Comment

by:McKnife
ID: 41743419
Ok... will try that :-) LOL I guess that cumulative update in question will fix that very problem from then on.
0
 
LVL 53

Author Comment

by:McKnife
ID: 41744137
This is nothing but bizarre.
I did as David suggested and waited...let the vm on all night. Update never finished. Then I wrote a script that checks for updates and tries the installation and when not successful, it reboots the machine and continues after the restart... it took about 10 reboot loops, but it finally finished successfully.
In between are dozens of service crashes (both windows update and the new "update orchestrator service for windows update", too). If you ask me: this does not look healthy.

But when I connect it to the internet, will it again cooperate with wsus right away? NO! So here my theory goes south.
This problems seems to be with services crashing on 1607. Why would they like the internet update server but not wsus and crash? The microsoft internet update servers would be clustered WSUS servers themselves, after all, I guess.

Conclusion is, I'll wait to deploy 1607 until this clears up.
0
How your wiki can always stay up-to-date

Quip doubles as a “living” wiki and a project management tool that evolves with your organization. As you finish projects in Quip, the work remains, easily accessible to all team members, new and old.
- Increase transparency
- Onboard new hires faster
- Access from mobile/offline

 
LVL 53

Author Comment

by:McKnife
ID: 41748765
Short fact update:
-Him who does not deselect to check for updates on installation of the anniversary update does indeed go right to 14393.10 which does not have the problem.
-If we only have a 14393.0 ISO and no internet access, we need to get our hands at the patch, the .msu file using the microsoft download catalog: AMD64-all-windows10.0-kb3176929-x64_239f7e8c5075df555b2898b4efc734d7d7dded49.msu
It can be deployed scripted and afterwards, the old WSUS is again his friend.

If someone could supply a way to download the 14393.10 ISO, I'd be grateful.
0
 
LVL 90

Expert Comment

by:John Hurst
ID: 41748766
Try going to go the Microsoft Tech Bench and download the 64-bit English ISO. Then burn the ISO to a DVD so as to see all the files

I went here to get the proper 1511 ISO to fix DISM.

The ISO above is different than from the Media Creation Link.

See if that helps.
0
 
LVL 53

Author Comment

by:McKnife
ID: 41748781
Could you verify the version after offline installation? All ISOs are different. The time where you had a checksum that was valid for windows ISOs is over.
Volume license customers don't get 14393.10 but 14393.0 for instance.
0
 
LVL 90

Expert Comment

by:John Hurst
ID: 41748788
When I did the download, it was in advance of the valid date. Now it appears the page is gone (sorry - I had not checked recently).

In its place is the Insider Preview

https://www.microsoft.com/en-us/software-download/windowsinsiderpreviewadvanced

I am an Insider (very infrequent) and I cannot vouch if this is the same as the production ISO.
0
 
LVL 53

Author Comment

by:McKnife
ID: 41749463
I'll sit this out. The new patch has problems, too, it has tons of services crash as soon as you target wsus, see this
The cumulative update that came in today was again only detected after a couple of reboots, so there's still no patch as todays' CU did not cover wsus (at least the description didn't say so).

Will not abandon this, but it might take as long as a month to come back (september's patch tuesday).
0
 
LVL 90

Expert Comment

by:John Hurst
ID: 41749466
There are updates just now including a cumulative update for V1607
0
 
LVL 53

Author Comment

by:McKnife
ID: 41749473
I was talking right about that one and said, it did not help.
0
 
LVL 90

Expert Comment

by:John Hurst
ID: 41749475
Mine is still updating. I will see what happens after restart.
0
 
LVL 90

Expert Comment

by:John Hurst
ID: 41749714
I just got this page (not yesterday)

https://www.microsoft.com/en-us/software-download/windows10ISO/

It says good until August 11

The download says V1607

Hurry
0
 
LVL 53

Author Comment

by:McKnife
ID: 41749853
I emphasized that it happens only when you connect to wsus.
0
 
LVL 90

Expert Comment

by:John Hurst
ID: 41750160
If someone could supply a way to download the 14393.10 ISO, I'd be grateful.  <-- I was just responding to this comment.
0
 
LVL 53

Author Comment

by:McKnife
ID: 41750182
Sure, but such an ISO does not exist, yet. Even if, the first patch was not the solution to this problem. The second CU for 1607 that came yesterday is not part of any ISO. There is no ISO updated yesterday to be found anywhere unless you create it yourself. We could do that, sure, but I'll wait and see if that 2nd CU even solves it.
0
 
LVL 90

Expert Comment

by:John Hurst
ID: 41768557
There has not yet been any cumulative updates.
0
 
LVL 90

Expert Comment

by:John Hurst
ID: 41768676
New cumulative update out this morning after 6:00 am Toronto time

1607 Build 14393.82   Yesterday, the build was .51

3 Windows 10 updates and Malicious Software removal.   KB3176936, KB3176934, and KB3176495
0
 
LVL 7

Expert Comment

by:Hector2016
ID: 41771714
I am entering late to the question, but I would like to say you can try to connect the computer to the internet and capture windows update client traffic on the NIC with WireShark to analize what is going on with the Update.

It would be nice if you could find something on the Windows Update log files too.
0
 
LVL 53

Author Comment

by:McKnife
ID: 41773448
On vacation. Will be back on it by the end of next week.
0
 
LVL 90

Expert Comment

by:John Hurst
ID: 41779176
New version out today 1607 Build 14393.105.

However, with no Internet for these machines, I am not at all certain the update will help.
0
 
LVL 53

Author Comment

by:McKnife
ID: 41789173
MS has confirmed this bug. Will be resolved in the next CU (next week), they say.
0
 
LVL 7

Expert Comment

by:Hector2016
ID: 41789733
The kb3176938 solved the issue on my computers. I had to download the CAB files from these locations:


Then install the right version on each computer with this method:

How to Install Cumulative Update KB3176938 CAB Files on Windows 10?

1. Download the CAB files x86/x64 depending upon the OS architecture.
2. Rename file to KBnumber.сab (here should be KB3176938.cab).
3. Copy to folder C:\
4. Run command-prompt as admin (Right click on Windows icon and choose option). Check the image above.
5. Enter the command "Start /w Pkgmgr /ip /m:c:\KB3176938.сab /quiet" (Without quotes)

This installs the KB3176938 CAB File in stealth or quiet mode without any UI prompt. Your devices will restart once the installation is over. Else you may need to restart your PC.

You can also use the DISM tool to install the CAB file:

dism /online /add-package /packagepath:”C:\PathToTheCABFile\CabFileName.cab”
0
 
LVL 53

Author Comment

by:McKnife
ID: 41789810
No, that update does not solve it. The problem is with cumulative updates, all others work. So for you to say that it is solved would mean you already got the next cumulative update. That one isn't out yet. It was discussed in technet.
0
 
LVL 7

Expert Comment

by:Hector2016
ID: 41790195
Could you post the Technet link for me, please.
0
 
LVL 53

Accepted Solution

by:
McKnife earned 0 total points
ID: 41790365
0
 
LVL 53

Author Closing Comment

by:McKnife
ID: 41829492
It was a bug and after MS identified it, they patched it away: the latest cumulative update (september 29th) proved to be deployable through wsus.
0

Featured Post

IT, Stop Being Called Into Every Meeting

Highfive is so simple that setting up every meeting room takes just minutes and every employee will be able to start or join a call from any room with ease. Never be called into a meeting just to get it started again. This is how video conferencing should work!

Join & Write a Comment

Sometimes drives fill up and we don't know why.  If you don't understand the best way to use the tools available, you may end up being stumped as to why your drive says it's not full when you have no space left!  Here's how you can find out...
Resolve DNS query failed errors for Exchange
This tutorial will walk an individual through the process of configuring basic necessities in order to use the 2010 version of Data Protection Manager. These include storage, agents, and protection jobs. Launch Data Protection Manager from the deskt…
With the advent of Windows 10, Microsoft is pushing a Get Windows 10 icon into the notification area (system tray) of qualifying computers. There are many reasons for wanting to remove this icon. This two-part Experts Exchange video Micro Tutorial s…

760 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

21 Experts available now in Live!

Get 1:1 Help Now