Windows Server Update Services (WSUS), previously known as Software Update Services (SUS), is a computer program developed by Microsoft that enables administrators to manage the distribution of updates and hotfixes released for Microsoft products to computers.

Dear All

           I have a WSUS server and already made approval for "feature update to window 10, version 1709, en-us , and when i look at the status report, i see that the client has not yet sent the events have been purged from the server, it been a fews days already, and the status report still remain like this, just wonder is that normal ? how do i get the update install on the window 10 computers ?


What is the KB number of the most recent Server 2016 update?

I have some Server 2016 servers that need to have their updates manually installed and would like to download and install the most recent full update so that way I will only have to install one update and won't have to download and install several updates.
What are the differences between the full and delta Windows update files?

For example, the Windows update KB428488 has two files available on the update catalog website (see below).

When would I use the full installation file as opposed to the delta installation file?

windows10.0-kb4284880-x64_34d88e02608fa8c7db3dda395434d93ba109169c.msu (1.3 GB)

windows10.0-kb4284880-x64_delta_ddc8a4e151a275c051e35329abe2fdc6cac13eb8.msu (727 MB)
I need to manually install some windows updates on certain Server 2016 servers (such as the KB4284880 update).

I have searched the Windows Server Update Server folder (that contains all of the downloaded update files) for the update filenames but haven't been able to find them.



Is there any way of extracting these updates into MSU files from the WSUS server so I can manually install them on the servers that need these updates manually installed? Or will I simply need to download them from Microsoft's website?
I'm having a problem on a Windows 7 workstation installing "2018-06 Security Monthly Quality Rollup for Windows 7 for x64-based Systems (KB4284826)". The update repeatedly fails with error code 8024200D. I've tried every step in, to no avail. The final step in this link suggests reinstalling Windows. I just did that not long ago with a scratch install. I really don't want to do that again.

Maybe related, maybe not: On Monday this computer was showing a black screen with a movable cursor. That's it. I ended up restoring the computer to close-of-day Friday (Acronis) and it was then back in action, but since then unable to install this update. I have been able to install one or two optional updates.

I'm having an issue with my WSUS server.  I've manually updated clients that were reporting failed updates.  I've checked the machines and they are updated, however wsus is still reporting them as failed.  Is there anyway to sync this?  I've tried rebooting but that does nothing.  It's server 2016
Is the wuauclt /UpdateNow command still valid with Server 2016 to immediately start the installation of Windows updates?

If this command isn't' valid with Server 2016 are there any other commands that will immediately start the installation of Windows updates?
Dear All

            in recent day my server 2012 r2 WSUS getting below problem, everytime i need to restart to get it fix, but after a while the problem will occur again, any idea how i can get the problem fixed ?


12052 - the dss authentication web service is not working

12042 - the simpleauth web service is not working

12022 - the client web service is not working

12032 - the server synchronization web service is not working

12012 - the API Remoting web service is not owrking

12002 the reporting web service is not working

13042 - seif-update is not working
What is the process of setting up automatic approval of Windows Server Update Services (WSUS) updates so I don't have to manually approve these updates?
After installing WSUS on 2016 core, I cannot find the option to configure the WSUS from my 2012 server manager console.  I've tried from dashboard, tools or right clicking the actual server name that has WSUS on it.  It shows up in my Server management console WSUS but I can't find the option to finalize the config before pointing my pc's to it.  It's probably a silly answer but I'm not getting anywhere looking myself.
My Window 10 can't upload the latest 1803 from my WSUS.  Any idea ?
What are the best free services for sending emails without SMTP authentication?

I need to configure my organization's WSUS server for sending notification emails and would prefer to use a free account that doesn't require SMTP authentication.

What are the best free services for doing this?
I have a Windows Server Update Services (WSUS) server setup that currently has all of the Server 2016 updates available except for the KB4103720 update (even though I have selected the WSUS server to download all of the Server 2016 updates).

I have verified this by sorting the updates chronologically by their KB numbers and by doing a search for the KB4103720 update.

I have checked and all other necessary Server 2016 updates are currently available within this WSUS server. I haven't selected for any of the other updates such as Windows 10 updates to download to the WSUS server yet since currently I only need it to update the Server 2016 servers within our network. I will add the Windows 10 updates later.

How can I manually add or make sure that this KB4103720 Server 2016 update is available to push out to the Server 2016 servers?
I clicked on the "Reports" tab of Server 2016 Windows Server Updates Services and was told that "The  "Microsoft Report Viewer 2012 Redistributable"  is required for this feature. Please close the console before installing this package."

So I clicked on the URL link and was directed to the website where I downloaded the "Microsoft Report Viewer 2012 runtime."

However, when I installed the "Microsoft Report Viewer 2012 runtime" ReportViewer.msi file I received a message that said "Setup is missing an installation prerequisite. -Microsoft System CLR Types for SQL Server 2012" (see the screenshot).

I have googled this and the results I have found have had me download several different MSI installation files without telling me exactly which one(s) I need to install. I want to make sure that I only install the component or program that I absolutely need and that I don't install anything extra.

So what is the best URL to visit to download and install the right "Microsoft System CLR Types for SQL Server 2012?"

Microsoft System CLR Types

I am planing to deploy the MS patches updates on nearly 3500 clients mixed Windows 10 and windows 7 using WUSS server.  I have no problem to creating  group under Computer node in WSUS  server and configure the GPO to push the updates for clients windows 10 & 7.
I am looking here for  help if there is way or Script which can push the updates on clients using wsus and install them at shutdown stage.  I mean when user shutdown PC the updates kicks off and install in the background.
I hope there should be way to achieve this or power shell script. Please advice.

Hello I use WSUS on Server 2016 to deply updates throughout the LAN, I have one Upstream & on Downstream.  Everything has been working fine, until this morning when I attempt to sync the downstream to the upstream it fails.  I can ping back & forth not sure what's happened.
After (2 of us) electing to approve ONLY security updates in WSUS and being extremely careful not to include any updates with Windows 10 in the subject we are left with Windows 10 update 1803 being deployed throughout the company. The deployment is an issue in itself, but the greater concern is how these updates became approved.

Once we discovered 1803 being deployed I went back into WSUS and saw a host of Win10 related updates as being approved, none of which were seen the day previous when the approvals to security patches were made.

Has anyone seen this before of have a logical explanation? Other than the possibility of two of us overlooking the slew of Win10 updates the only related thought I can offer is that the WSUS server was restarted between approval and deployment (to install its own updates).

BTW - no-one has access to WSUS other than the 2 admins that worked together on approving the updates.

I have WSUS server (running on Windows server 2012 R2).  The updates sections show that the 2018-05 Cumulative Update for Windows 10 1709 for x64 based systems (KB4103727) is needed by 2 devices.    When I look at these 2 devices, they show that they need this update.   I have a total of 8 Windows 10 1709 devices.  Six of them have installed the 2018-05 cum update.  Hoever, even these 6 installed over the course of several weeks.   How can I force the windows 10 monthly updates to install when they've been downloaded to the WSUS server instead of waiting until some random date/time?  The updates are approved, do not show any failures, they just seem to sit there with approval status = install, and installed status = not installed.
I find the the Window 1803 is not available to deploy through the WSUS. Do I need to select the "Updates" in the Classifications". please note that under "Product" tab, I have already select Window 10 Version 1803 and Later Upgrade & Servicing Drivers.

Two Hyper-V virtual operating systems running Server 2016 Datacenter are unable to install Windows updates.

The Hyper-V base server and both of these virtual servers have had Windows activated.

I have run the Windows Update Troubleshooter and it says "Potential Windows Update Database error detected" and "Not fixed" (see the screenshot).

Windows Server Update Server is not being used in this environment. The Hyper-V base server has installed all Windows updates.

What can be done to fix this issue so that the updates will successfully install on these two Hyper-V virtual operating systems?

Windows Update Database error

We have a WSUS server issue.  In short, there are computers that are showing "critical" updates that are "needed", yet when we look in the UPDATES view, and try to filter by "Critical updates" that show status of "unapproved", there are none.  Not sure what is causing this anomaly. It's a 2012 Server, with the latest WSUS version.
Windows 7 workstations.    50 computers have not reported status for more than 30 days.  The check in status are random across workstations. Some 30 days some more.

I performed the following on a single workstation.

      1. netsh winhttp reset proxy

After executing the command I  restarted the  workstation

      2. Executed the following commands on workstation
wuauclt /detectnow /resetauthorization
wuauclt /reportnow

The workstation was not checking in.
After carrying out these commands the Windows Update utility can be started to search for updates. At this point the client should register with WSUS after 15 minutes.   Nope did not ever check in....

I then ran the diagnostics report attached using the utility here.
            a. (Report Attached)
      1. Reset WSUS repository on workstation   ( This did not help)

Final Error IS 80244018 as seen in attachment

WindowsUpdate Log File Data
    06-01	10:59:31:440	 836	1750	Agent	*************
2018-06-01	10:59:31:440	 836	1750	Agent	** START **  Agent: Finding updates [CallerId = <<PROCESS>>: sftservice.exe]
2018-06-01	10:59:31:440	 836	1750	Agent	*********
2018-06-01	10:59:31:440	 836	1750	Agent	  * Online = Yes; Ignore download priority = No
2018-06-01	10:59:31:440	 836	1750	Agent	  * Criteria = "( IsInstalled = 0 and IsHidden = 0 and 

Open in new window

In WSUS, Can I filter approved updates by date range?  I am trying to figure out whether an approved update caused a network issue with some laptops NICs, but I can't figure out how to filter by date.  If I select approved updates, it will crash the update services portal since it lists all updates (60k +)
We have a WSUS server that provides a validated list of Windows Updates.  The product PCs Windows 8.1 and Windows 10 will use this list to determine which updates to download from Microsoft Windows Update Server/store automatically.  Once the validated patches are download automatically, the user will decide when to install the updates manully.  This works currently.  However, I am able to select "Check online for updates from Microsoft Update" to download and install the unqualified updates manually.  Is there a way to prevent the user from selecting "Check online for updates from Microsoft Update" to download the unqualified Windows updates and not breaking what have been working?
Hello I'm trying to use WSUS to update an offline machine using Ad Hoc.  Not sure how to accomplish this, or if its even possible?



Windows Server Update Services (WSUS), previously known as Software Update Services (SUS), is a computer program developed by Microsoft that enables administrators to manage the distribution of updates and hotfixes released for Microsoft products to computers.

Top Experts In