SCCM not finding any required updates for Server 2012 OS.

SCCM  applying updates to client.  For some reason When I go to deploy new updates I do not see 2012 Server updates as required.  When I ran a manually scan from Control Panel | Windows Update (not SCCM scan) I got back 115 updates. Now this is not the case for my Server 2008 group.  I am not seeing errors so I am not sure what the root cause is.
LVL 29
yo_beeDirector of Information TechnologyAsked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

RobertSystem AdminCommented:
In the past when I ran into this the process I used was to uninstall the client reset windows update then reinstalled the client.
That said have you checked the logs to see if there is any indication as to why the updates are failing to detect.
yo_beeDirector of Information TechnologyAuthor Commented:
I will try that. Thanks
yo_beeDirector of Information TechnologyAuthor Commented:
Would this powershell script reset WU https://gallery.technet.microsoft.com/scriptcenter/Reset-WindowsUpdateps1-e0c5eb78


Here is the log of one of the servers:


Attempting to cancel any job started at non-business hours.      UpdatesDeploymentAgent      1/23/2019 5:00:00 AM      5980 (0x175C)
CUpdateAssignmentsManager received a SERVICEWINDOWEVENT START Event      UpdatesDeploymentAgent      1/23/2019 10:00:00 PM      1940 (0x0794)
No current service window available to run updates assignment with time required = 1      UpdatesDeploymentAgent      1/23/2019 10:00:00 PM      1940 (0x0794)
Suspend activity in presentation mode is selected      UpdatesDeploymentAgent      1/23/2019 10:00:00 PM      1940 (0x0794)
At least one user has elected to suspend non-business hours activity when in presentation mode. Checking for presentation mode.      UpdatesDeploymentAgent      1/23/2019 10:00:00 PM      1940 (0x0794)
Proceeding to non-business hours activites as presentation mode is off.      UpdatesDeploymentAgent      1/23/2019 10:00:00 PM      1940 (0x0794)
Auto install during non-business hours is disabled or never set, selecting only scheduled updates.      UpdatesDeploymentAgent      1/23/2019 10:00:00 PM      1940 (0x0794)
A user-defined service window(non-business hours) is available. We will attempt to install any scheduled updates.      UpdatesDeploymentAgent      1/23/2019 10:00:00 PM      1940 (0x0794)
Attempting to install 0 updates      UpdatesDeploymentAgent      1/23/2019 10:00:00 PM      1940 (0x0794)
Unable to find CCM_PrePostActions.SiteSettingsKey=1.      UpdatesDeploymentAgent      1/23/2019 10:00:00 PM      1940 (0x0794)
GetActions() did not succeed. 80070490.      UpdatesDeploymentAgent      1/23/2019 10:00:00 PM      1940 (0x0794)
No actionable updates for install task. No attempt required.      UpdatesDeploymentAgent      1/23/2019 10:00:00 PM      1940 (0x0794)
Updates could not be installed at this time. Waiting for the next maintenance window.      UpdatesDeploymentAgent      1/23/2019 10:00:00 PM      1940 (0x0794)
CUpdateAssignmentsManager received a SERVICEWINDOWEVENT START Event      UpdatesDeploymentAgent      1/24/2019 1:00:00 AM      1940 (0x0794)
Suspend activity in presentation mode is selected      UpdatesDeploymentAgent      1/24/2019 1:00:00 AM      1940 (0x0794)
At least one user has elected to suspend non-business hours activity when in presentation mode. Checking for presentation mode.      UpdatesDeploymentAgent      1/24/2019 1:00:00 AM      1940 (0x0794)
Proceeding to non-business hours activites as presentation mode is off.      UpdatesDeploymentAgent      1/24/2019 1:00:00 AM      1940 (0x0794)
Auto install during non-business hours is disabled or never set, selecting only scheduled updates.      UpdatesDeploymentAgent      1/24/2019 1:00:00 AM      1940 (0x0794)
A user-defined service window(non-business hours) is available. We will attempt to install any scheduled updates.      UpdatesDeploymentAgent      1/24/2019 1:00:00 AM      1940 (0x0794)
Attempting to install 0 updates      UpdatesDeploymentAgent      1/24/2019 1:00:00 AM      1940 (0x0794)
Unable to find CCM_PrePostActions.SiteSettingsKey=1.      UpdatesDeploymentAgent      1/24/2019 1:00:00 AM      1940 (0x0794)
GetActions() did not succeed. 80070490.      UpdatesDeploymentAgent      1/24/2019 1:00:00 AM      1940 (0x0794)
No actionable updates for install task. No attempt required.      UpdatesDeploymentAgent      1/24/2019 1:00:00 AM      1940 (0x0794)
Updates could not be installed at this time. Waiting for the next maintenance window.      UpdatesDeploymentAgent      1/24/2019 1:00:00 AM      1940 (0x0794)
CUpdateAssignmentsManager received a SERVICEWINDOWEVENT START Event      UpdatesDeploymentAgent      1/24/2019 1:00:00 AM      1940 (0x0794)
Suspend activity in presentation mode is selected      UpdatesDeploymentAgent      1/24/2019 1:00:00 AM      1940 (0x0794)
At least one user has elected to suspend non-business hours activity when in presentation mode. Checking for presentation mode.      UpdatesDeploymentAgent      1/24/2019 1:00:00 AM      1940 (0x0794)
Proceeding to non-business hours activites as presentation mode is off.      UpdatesDeploymentAgent      1/24/2019 1:00:00 AM      1940 (0x0794)
Auto install during non-business hours is disabled or never set, selecting only scheduled updates.      UpdatesDeploymentAgent      1/24/2019 1:00:00 AM      1940 (0x0794)
A user-defined service window(non-business hours) is available. We will attempt to install any scheduled updates.      UpdatesDeploymentAgent      1/24/2019 1:00:00 AM      1940 (0x0794)
Attempting to install 0 updates      UpdatesDeploymentAgent      1/24/2019 1:00:00 AM      1940 (0x0794)
Unable to find CCM_PrePostActions.SiteSettingsKey=1.      UpdatesDeploymentAgent      1/24/2019 1:00:00 AM      1940 (0x0794)
GetActions() did not succeed. 80070490.      UpdatesDeploymentAgent      1/24/2019 1:00:00 AM      1940 (0x0794)
No actionable updates for install task. No attempt required.      UpdatesDeploymentAgent      1/24/2019 1:00:00 AM      1940 (0x0794)
Updates could not be installed at this time. Waiting for the next maintenance window.      UpdatesDeploymentAgent      1/24/2019 1:00:00 AM      1940 (0x0794)
CUpdateAssignmentsManager received a SERVICEWINDOWEVENT START Event      UpdatesDeploymentAgent      1/24/2019 1:00:00 AM      4472 (0x1178)
Suspend activity in presentation mode is selected      UpdatesDeploymentAgent      1/24/2019 1:00:00 AM      4472 (0x1178)
At least one user has elected to suspend non-business hours activity when in presentation mode. Checking for presentation mode.      UpdatesDeploymentAgent      1/24/2019 1:00:00 AM      4472 (0x1178)
Proceeding to non-business hours activites as presentation mode is off.      UpdatesDeploymentAgent      1/24/2019 1:00:00 AM      4472 (0x1178)
Auto install during non-business hours is disabled or never set, selecting only scheduled updates.      UpdatesDeploymentAgent      1/24/2019 1:00:00 AM      4472 (0x1178)
A user-defined service window(non-business hours) is available. We will attempt to install any scheduled updates.      UpdatesDeploymentAgent      1/24/2019 1:00:00 AM      4472 (0x1178)
Attempting to install 0 updates      UpdatesDeploymentAgent      1/24/2019 1:00:00 AM      4472 (0x1178)
Unable to find CCM_PrePostActions.SiteSettingsKey=1.      UpdatesDeploymentAgent      1/24/2019 1:00:00 AM      4472 (0x1178)
GetActions() did not succeed. 80070490.      UpdatesDeploymentAgent      1/24/2019 1:00:00 AM      4472 (0x1178)
No actionable updates for install task. No attempt required.      UpdatesDeploymentAgent      1/24/2019 1:00:00 AM      4472 (0x1178)
Updates could not be installed at this time. Waiting for the next maintenance window.      UpdatesDeploymentAgent      1/24/2019 1:00:00 AM      4472 (0x1178)
CUpdateAssignmentsManager received a SERVICEWINDOWEVENT END Event      UpdatesDeploymentAgent      1/24/2019 4:00:00 AM      1940 (0x0794)
CUpdateAssignmentsManager received a SERVICEWINDOWEVENT END Event      UpdatesDeploymentAgent      1/24/2019 4:00:00 AM      1940 (0x0794)
CUpdateAssignmentsManager received a SERVICEWINDOWEVENT END Event      UpdatesDeploymentAgent      1/24/2019 4:00:00 AM      1940 (0x0794)
CUpdateAssignmentsManager received a SERVICEWINDOWEVENT END Event      UpdatesDeploymentAgent      1/24/2019 5:00:00 AM      2428 (0x097C)
No current service window available to run updates assignment with time required = 1      UpdatesDeploymentAgent      1/24/2019 5:00:00 AM      2428 (0x097C)
Attempting to cancel any job started at non-business hours.      UpdatesDeploymentAgent      1/24/2019 5:00:00 AM      2428 (0x097C)
CompTIA Security+

Learn the essential functions of CompTIA Security+, which establishes the core knowledge required of any cybersecurity role and leads professionals into intermediate-level cybersecurity jobs.

yo_beeDirector of Information TechnologyAuthor Commented:
Not sure if you saw my last response.
RobertSystem AdminCommented:
Sorry don't get on here every day.
The log just shows it doesn't have any updates no errors that I seen.

Have you verified that the servers are in the device group that the deployment is assigned to and not in any exclusions?
yo_beeDirector of Information TechnologyAuthor Commented:
Yes the machines are. The crazy thing is if I filter all updates by Title containing 2012 I get a list of updates, but not one of them state that they are required.  When I run WU check manually from a 2012 machine it will discover a bunch of needed updates
RobertSystem AdminCommented:
I reviewed the script and yes it should do the reset on WU.

Assuming that does not work the only other thing I can think of is to confirm that the updates for 2012 are actually being downloaded in SCCM and added to the deployment group (the ones listed when you run WU manually)
yo_beeDirector of Information TechnologyAuthor Commented:
But shouldn't CM see if the machine requires the update prior to even downloading it?
RobertSystem AdminCommented:
Basically you build your update package and deploy it to the computer (device collection), the computer then does the software update scan against what has been deployed to it.
Since you cant deploy an update that has not been downloaded it will not find updates that SCCM hasn't downloaded and deployed.
This gives you control over what updates are installed on the system.
yo_beeDirector of Information TechnologyAuthor Commented:
Robert I think you are missing what I am saying.  This has nothing to do with downloading and deploying.  It has to do with SCCM not evening seeing that the updates are even required.  

So on patch Tuesday my WSUS service sees that there are new updates available to download and after a day or so the clients had enough time to run the update scan against what WSUS/SCCM see (Metadata only at this point).  Once the client has reported back to SCCM I will start to see Update1(KBxxxxxxx)  is required as a needed update for 150 of my clients.
In my attached screenshot you can see that the update has not been downloaded not deployed, but it does say that it is required.
SCCM.jpg
This is not the case for any of my Windows 2012 R2 machines.
yo_beeDirector of Information TechnologyAuthor Commented:
Update:
  • I downloaded all the Updates for 2012 server
  • Uninstalled CM client
  • Ran the PS script to reset Updates
  • Reinstall CM client

Still none of the 2012 machine are registering that they need updates.
RobertSystem AdminCommented:
When you view the server in SCCM devices does it show the client is installed on the server and that it is active?
Is it pulling the client settings etc.

On the client side do all the components that are configured show as installed / enabled and do all the actions show up under the actions tab?

This is a long shot but worth checking.
Did you check if there are duplicate GUID's in the SCCM database for the server object?
I previously had an issue with that and there are several fixes.
some client based others you can fix on server side.
https://social.technet.microsoft.com/Forums/en-US/a497c5d3-1f7f-4d05-a79e-1b99a33e8ec9/sccm-2012-r2-cu5-duplicate-guid-on-clients?forum=configmanagergeneral
https://kamalakannansccmblog.wordpress.com/2013/04/28/system-center-configuration-manager-duplicate-guid-for-clients/

Aside  from that with out reading though all the logs to try to identify where it is failing I don't know what else to suggest.
yo_beeDirector of Information TechnologyAuthor Commented:
It does show that the client is install and it is communicating, but for some reason it does not see if updates are installed.
I have not checked for dup guids, but will look at this. This is the case for all my Window 2012 and new machines.  My 2008's are register with the updates as well as required.
yo_beeDirector of Information TechnologyAuthor Commented:
So the cleanup steps did not work.
RobertSystem AdminCommented:
Another thought would be that the product is not selected for the software update.
Go to Administration
Expand Site Configuration
Click Sites
Then up in the ribbon select configure site components and select software update point
Click on the products tab and scroll down to the Server 2012 selections.

Site.png
if that was the case select the product and save then run the sync

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
yo_beeDirector of Information TechnologyAuthor Commented:
I did check that prior and I am not sure if it was checked at the time of posting this question, but it has been since and I still am not see any changes.
RobertSystem AdminCommented:
sorry I am out of ideas.
yo_beeDirector of Information TechnologyAuthor Commented:
thanks for trying
yo_beeDirector of Information TechnologyAuthor Commented:
Not sure what actually did it, but they are registering for the updates needed.  I can confirm that the 2012 R2 query for new updates was not selected.  That might have been the solution and it just took a bit of time
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Windows OS

From novice to tech pro — start learning today.