WUServer and WUStatusServer Registry Settings Ignored by WUA

Sunil Pagare 46 Reputation points
2022-10-25T08:07:07.273+00:00

Hi Team,

Recently we are facing with very unexpected problem, where on few of the Windows OS machine (mostly running server 2012, server 2016 and Windows 10) are not detecting and installing Windows Update from configured WSUS server as per below registry settings. We also tried configuration from group policy and resetting the Windows Update Component (restarted all WU services), still Windows Update Agent as per WindowsUpdate.log goes to internet Microsoft Update server for searching the missing Windows updates. Registry configured settings for Custom WU server as below:
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate]
"WUASettingsChanged"=dword:00000001
"WUServer"="http://10.10.7.89:8530"
"WUStatusServer"="http://10.10.7.89:8530"
"UpdateServiceUrlAlternate"="http://10.10.7.89:8530"
"DoNotEnforceEnterpriseTLSCertPinningForUpdateDetection"=dword:00000001
"SetProxyBehaviorForUpdateDetection"=dword:00000001
"AcceptTrustedPublisherCerts"=dword:00000001
"DisableWUfBSafeguards"=dword:00000001

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU]
"NoAutoRebootWithLoggedOnUsers"=dword:00000001
"NoAutoUpdate"=dword:00000001
"DetectionFrequencyEnabled"=dword:00000000
"UseWUServer"=dword:00000001
"AUOptions"=dword:00000002

Is there any issue with Microsoft WUA component for this or any other kind of environment issue?

Please suggest the fix or any workaround for this.

Best Regards,
Sunil Pagare

Windows Server
Windows Server
A family of Microsoft server operating systems that support enterprise-level management, data storage, applications, and communications.
12,894 questions
0 comments
Accepted answer
  1. Adam J. Marshall 9,206 Reputation points MVP
    2022-11-03T13:10:13.177+00:00

    From an Administrative Command Prompt on an affected client, run the following:
    gpresult /h gpo.htm
    and share the result with your favourite method or pastebin it so that we can see it.

    1 person found this answer helpful.

3 additional answers

Sort by: Most helpful
Most helpful Newest Oldest
  1. Adam J. Marshall 9,206 Reputation points MVP
    2022-10-25T14:11:20.547+00:00

    It is likely environmental.

    Dual Scan comes to mind
    https://www.ajtek.ca/wsus/dual-scan-making-sense-of-why-so-many-admins-have-issues/

    Also, use this to troubleshoot - work from the top to the bottom.
    https://www.ajtek.ca/wsus/client-machines-not-reporting-to-wsus-properly/

    0 comments
  2. AllenLiu-MSFT 43,951 Reputation points Microsoft Vendor
    2022-10-27T08:42:15.523+00:00

    Hi, @Sunil Pagare

    Thank you for posting in Microsoft Q&A forum.

    It looks like dual scan like Adam said, you may try to enable the policy "Do not allow update deferral policies to cause scans against Windows Update" for the client machines.

    254617-1.png

    If the answer is the right solution, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".
    Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

  3. Sunil Pagare 46 Reputation points
    2022-11-03T03:50:05.233+00:00

    Hi @AllenLiu-MSFT , @Adam J. Marshall

    Thanks for your inputs. We confirmed that there is no group policy configured regarding Windows Update, WUB. This issue is occurring only on 2 to 3 machines.

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.