Windows 10: Windows 10 getting updates not approved in WSUS issue

In our Windows 10 virtual environment we have our desktops currently 20h2 connected to an on-prem WSUS server for updates. We started noticing a lot of issues with the latest KB5005033 august patch where it will install but the post install reboot builds to 98% and then flips to "we're sorry we cannot complete....undoing changes" and that takes 20-30 min . Anyways looking at WSUS we have that KB set to not approved so wondering how we keep having it show up on our desktops.....could Microsoft be forcing it on us anyways since its a "mandatory" update w/ the print nightmare issue?

:)

 

Approval delete an update with wsus 3.0 sp2

Approval delete an update with wsus 3.0 sp2 not work with win10

 

Approval delete an update with wsus 3.0 sp2

thanks for your reply.

you know ,wsus can deploy updates to clients ,including windows 10.

my issue is :

windows 10 can install updates what deployed by wsus,but can't uninstall any updates.

you konw ,we can deploy some updates uninstallation by wsus.

 

The WSUS support thread

This thread is for all things WSUS (Windows Server Update Services). Discussion, installation questions, problems all go here.

What is WSUS? It's basically a big file cache for all your Windows/Microsoft updates, so all your updates are only ever downloaded over the internet once. Instead of getting your updates directly from Microsoft whenever you reinstall your operating system, you point Windows to your local WSUS server instead. This makes downloading the multi-gigabytes of updates way faster using your internal network and also saves your internet bandwidth, which is often metered and limited.

Note that it requires Windows Server to run. I recommend running the latest Server 2008 R2 for performance, stability and security, if you can. This is a 64-bit only OS. And yes, the server can update from it's own WSUS server too. *Cool

I've got links to a few resources below and I'll be adding more goodness to this post and the next one, as people make useful contributions to this thread.

Some WSUS resources to get you started:

The manual: http://technet.microsoft.com/en-us/library/dd939796(WS.10).aspx

WSUS home: http://technet.microsoft.com/en-us/wsus/default.aspx

WSUS forum: Technet forums - WSUS

WSUS wiki: www.wsuswiki.com


POINTING WINDOWS TO THE WSUS SERVER

Note that this procedure is all you have to do on Vista and 7. XP requires a little extra and the whole update process isn't as transparent or efficient.

- Click the Orb at the bottom left of the desktop aka 'Start' button
- In the search field enter GPEDIT.MSC
- In the Local Group Policy Editor (LGPE) console that appears, navigate to: Computer configuration > Administrative Templates > Windows Components > Windows Update
- Double click the Specify Intranet Microsoft update service location Group Policy setting. Note that Not Configured is showing in the State column






- The dialog box opens. Note that the Not Configured radio button is selected






- Enter the server details, by clicking the Enabled radio button and entering the same details in both Options fields. The server's name is the standard Windows name. My server is called afterburner *Smile






- Click OK. The main LGPE window now looks like below. Note that Enabled is now showing in the State column.





- Close the LGPE window

- Open the Windows Update window. It should now show You receive updates: Managed by your system administrator





Now, whenever you check for updates, Windows will access your WSUS server instead of looking over the internet to Microsoft's servers.
If you want to change it back at an time, simply change the Group Policy setting back to Not Configured.