Windows 10: Clientes con W10 no notifican a WSUS

Buenas tardes.

Tenemos un servidor Windows Server 2012 R2 Standard con WSUS (v. 6.3.9600.18694). Está funcionando correctamente, los clientes reciben las actualizaciones según la programación y aprobación de actualizaciones.

La incidencia que tenemos es que desde el 31/07/2019 los clientes con Windows (10.0) parece que no notifican a WSUS. Me explico mejor: en la consola aparecen como que la última vez que notificaron fue el 31/07/2019; además, los nuevos equipos que ponemos en marcha, se quedan en "Aún sin notificar", sin embargo, están recibiendo las actualizaciones desde WSUS.

Si hago un telnet al 8530 desde los clientes, el servidor responde sin problemas. Los clientes con cualquier otra versión de Windows, notifican con normalidad (7, 8, 8.1, Vista, incluso algún XP que queda por ahí).

Como aclaración: la mayoría de los W10 están ya en la 1903, aunque tenemos algunos en 1807, 1803, incluso 1703, que tampoco notifican.

Ya hemos probado todo lo que se nos ha ocurrido: reiniciar servicios, reiniciar IIS, reiniciar BBDD, incluso reiniciar el server sin éxito. Podemos descartar incidencia con alguna KB reciente, ya que las aplicamos el 18/07 y el 21/08 (tanto en servers como clientes); ocurriendo la incidencia desde el 31/07.

¿Se trata de alguna incidencia conocida? ¿Alguna sugerencia?

Muchas gracias. Un saludo.

:)

 

WSUS clients are not able to get an updates. WSUS is reporting different version of client.

Hello guys,

We have issues across our company that 1709 users with Windows 10 are not getting updates from our WSUS server (2012 R2).

We tried known hot fixes such as deleting SoftwareDistribution folder, forcing service to stop and run again, manually find updates, restarting clients, restarting WSUS, downloading all avaiable updates
for WSUS, run diag tool downloaded from Microsoft on clients but nothing helps.

We are also tried to run new 2016 WSUS server but situation did not changed. I think maybe problem is in client version 1709?

Windows 10 1709 (16299.309) (WSUS is reporting 10.0.16299.248)

Windows 2016 (14393.2125)

We have around 150 clients with this issue.

Issues:

1. WSUS server is reporting that clients need updates but clients are not getting any.

2. Some clients are not reporting back but they are reachable. (F.E. Last report 25.2.2018)

3. When we are connected remotely to client PC and run WU manually, WU is telling us that PC has all needed updates and none are available.

4. We can see different version in WSUS than client's version really is (agent version - maybe this is the issue?)

I hope my description is enough, I saw many forums / users / companies are dealing with same issue but there is not a fix for this yet and also I did not saw a thread on Microsoft about this exact problem
yet. I am already googling this for 3 days...

Thanks for answering,

Best regards

Ondrej

 

WSUS updates and defender definition updates problem with W10 LTBS 1607

Hello,

Environment

A number of windows 10 PRO are running and WSUS properly provides updates for them.

Recently a number of Dell 5070 WES clients with preinstalled W10 IOT (current version is W10 LTBS 1607 Enterprise edition) have been deployed.

Settings for WSUS

In products list:

In addition to other W10 editions selected W10, W10 LTBS and a number of other versions. I also selected Windows Defender.

In classification:

Selected Critical Updates, Definition Updates, Security Updates, Service Packs, Updates Rollups, Upgrades.

Definitions updates are set to be automatically approved.

W10 LTBS updates and definitions

WSUS recognizes Wyse 5070 devices as Windows 10 Enterprise 2016 LTBS but It does not show any current failed/needed updates for these devices Defender defenitions updates are not being deployed.

Online updates with Microsoft does work: patches/updates can be downloaded and installed and defender definitions are applied automatically.

 

WSUS clients are not able to get an updates. WSUS is reporting different version of client.

Just noticed that:

Any clients that have quit reporting and failed to play nice with WSUS have both of these security rollups:

KB4093108

KB4093118

The clients that work fine do not have the above patches installed. It is the same regardless if they are Win-7, Win2008 server, or Win-10.

My WSUS server only serves up about 69 clients and 23 of them started experiencing the issue around the same time that the above patches were installed. Being that they are roll-ups, they can't be uninstalled.

Not a happy camper with MS and WSUS right now.