question

SzymonPirg-3585 avatar image
0 Votes"
SzymonPirg-3585 asked RitaHu-MSFT commented

WSUS - no update available for Windows Server 2019 (KB5001384)

Hello everyone,

I would like to know why some updates are available for WSUS and some are not. For example, KB5001384 is available by downloading directly from Windows Server client, but if I want to send it from WSUS it is not available - all I can do is download manually and import the update to WSUS which is a pain. I think this is quite an important update and I am surprised that it is not available for WSUS. This is nowhere explained on the internet.

KB5001384 is just an example, but I assume other updates are also not available via WSUS.

90784-wsus.jpg


90728-produkty.jpg


90729-produkty-2.jpg


90730-klasyfikacje.jpg




Sorry for the Polish language on the screens.

windows-server-update-services
wsus.jpg (41.6 KiB)
produkty.jpg (86.2 KiB)
produkty-2.jpg (82.7 KiB)
klasyfikacje.jpg (61.4 KiB)
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

RitaHu-MSFT avatar image
0 Votes"
RitaHu-MSFT answered RitaHu-MSFT edited

Hello SzymonPirg,

Thanks for your feedback. I totally understand your concern, and we're very sorry for any inconvenience that may caused. As we all known, WSUS is responsible for deploying updates for the clients. In my opinion, the WSUS server sync updates from https://sws.update.microsoft.com site which is different from importing updates on the WSUS console manually. We could import updates manually in Microsoft Update Catalog.

In fact, the security updates and hot fixes are cumulative in windows 10. So all the hot fixes will be included into the next month. Don't worry about that the clients will miss some security updates.

In addition, I found that only the Out-of-band and Preview version updates couldn't be synced on the WSUS console. And the updates will be superseded by the cumulative updates next month. Here are related pictures for your reference:
(Let's we confirm all the updates in March of os version 1909. Please check all the update history in windows 10 1909 in this link)

91553-1.png

91554-2.png

Thanks for your understanding and cooperation.

Hope the above will be helpful. Have a nice day.

Regards,
Rita


If the response is helpful, please click "Accept Answer" and upvote it.
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.


1.png (103.9 KiB)
2.png (48.3 KiB)
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

RitaHu-MSFT avatar image
0 Votes"
RitaHu-MSFT answered RitaHu-MSFT edited

Hello SzymonPirg,

Thanks for your posting on Q&A.

In my opinion, there are several channels to get updates, like Windows Update or Microsoft Update/ MIcrosoft Update Catalog/WSUS as you mentioned above. Not all the updates could get from WSUS server. The updates channels are not managed by WSUS. The responsibility of WSUS is to deploy updates to the clients. I'm sorry about this.

Sometimes, we couldn't sync updates on the WSUS console but we could import the update manually, just like KB5001384
Reference picture:
91025-4.png

I tried to import the KB5001384 manually on my lab and there are reference pictures for your reference to import manually:
91091-5.png

91090-6.png

91101-7.png

91019-9.png

Thanks for your understanding and cooperation.

Rita


If the response is helpful, please click "Accept Answer" and upvote it.
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.


4.png (63.1 KiB)
5.png (49.0 KiB)
6.png (98.9 KiB)
7.png (116.2 KiB)
9.png (120.0 KiB)
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

SzymonPirg-3585 avatar image
0 Votes"
SzymonPirg-3585 answered SzymonPirg-3585 edited

Hello Rita,

Thank you for the answer to the reported problem.

I understand that I can add an update to WSUS manually, but that doesn't explain why it doesn't automatically sync to WSUS - why it's not available as well as other fixes. It is hard to imagine a situation where I would have to look for individual updates that are not available for WSUS.

Let's imagine a situation in which we have hundreds of servers in the organization and I limit their access to the Internet and to updates on the firewall. I want all servers to download patches only via WSUS (set via GPO). How do I know if the servers have downloaded all the patches they should if WSUS doesn't know they exist?
Is there a clear Microsoft position explaining why part of the update is not automatically available for WSUS?

When I just deploy WSUS, am I forced to spend tens of hours analyzing all new patches and adding them manually to WSUS?

I am looking for an explanation because, as is often the case - in our IT department there are few people, and there are many responsibilities, and WSUS seemed to me
to be a fully autonomous solution.

5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

SzymonPirg-3585 avatar image
0 Votes"
SzymonPirg-3585 answered RitaHu-MSFT commented

Hello Rita,

Thank you for clarifying the issue - I checked selectively on the example of KB5001384 which updates are contained in it and in fact these individual ones are downloaded to WSUS.

Considering what you wrote about:

only the Out-of-band and Preview version updates couldn't be synced on the WSUS console

there is no need to worry and probably not even a reason to manually add these patches to WSUS.


Thank you for your time and explaining my problem. Have a nice day.

· 1
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

@SzymonPirg-3585
Thanks for your understanding and cooperation. Please feel free to post on this forum if there are any questions next time.

Regards,
Rita

1 Vote 1 ·