Terminal server 2016 won't download WSUS updates

Question

Hi,
in our organisation we are already using WSUS. It is providing updates for Win10 clients and a few MS servers (2016, 2019). Only ther terminalservers with windows server 2016 can't download updates. WSUS is running on Windows Server 2019.

After restarting Server 2016 a few updates has been found, by clicking download Installation process seems to start but is hangig with: Updates are downloading - 0%.

Already tried to fix the issue with the following steps:

• Restart services wuauserv, BITS, appidsvc, cryptsvc
• Remove folder SoftwareDistribution
• Removed device and reregistered in WSUS
• WSUSPool queue length 25000
• Kaspersky Services deactivated and also uninstalled
• WSUSPool, advanced settings

Limit Interval (minutes): 15

Limit for private memory: 0

• HKLM\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate

  DisableDualScan = 1

  UpdateServiceUrlAlternate = http://WSUS-IP:8530

Does anyone else has got any idea?

Answer 1

Hi,
I removed the device out of WSUS MMC and run the client side script after that.
The machine reappears in WSUS and goes through the update process as before without success. Also after reboot. I will now wait for next week to get some more updates!

Which specific update do you mean to decline and re-approve? KB5012596?

Answer 2

I would look at installing KB5015019 (May+OOB) instead of KB5012596 (April). You will have to import KB5015019 into WSUS as it's an OOB update.

Answer 3

@ChriSch
Thanks for your posting on Q&A.

Please try to follow the below link to reset Windows Update components on the affected Windows Server 2016 servers:
https://learn.microsoft.com/en-us/windows/deployment/update/windows-update-resources

Then we could try to download the approved updates again. If the link isn't helpful, please try to provide the windowsupdate.log for us to research further.
We could open the PowerShell as an administrator and print the get-windowsupdatelog command to get the log file. Note that the log will be placed into the desktop by default.

Best regards,
Rita

---

If the answer is the right solution, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

Answer 4

Hi @Rita Hu -MSFT ,
thank you for your support. Due to public holidays I was off for a few days.

After going through all the steps described in your link above windows updates aren't working until now.

While reregistering BITS and WINDOWS UPDATE files in step '6.' I got a few error messages.
a) For example the following files does not exist:
gpkcsp.dll, initpki.dll, msxml.dll, muweb.dll, qmgrprxy.dll, sccbase.dll, slbcsp.dll, wuaueng1.dll, wucltui.dll, wucltux.dll, wuweb.dll, wuwebv.dll

b) And more DLLs are not able to load:
browseui.dll, mshtml.dll, qmgr.dll, shdocvw.dll, wuaueng.dll

For a) these DLLs doesn't exist on an other WIN 2016 server - but Win updates are running on this machine.

Attached you can find the WindowsUpdate.log:
206669-windowsupdate.log

Answer 5

As requested you can find one more WindowsUpdate.log and Version of Windows Server
207014-windowsupdatelog.log