Support Tip: Many new revisions of updates may be downloaded by the WSUS server

InfoButtonUPDATE – 12/4/2012: The System Center Configuration Manger team has released a hotfix ( to address the re-downloading and redistributing issues described by this post.  To minimize further impact, it is strongly suggested that all Configuration Manager 2007 admins install the hotfix immediately to all Configuration Manager 2007 primary and secondary site servers. 


Microsoft released an update for Windows Server Update Services (WSUS) 3.0 Service Pack 2 (SP2) on Tuesday the 10th of October 2012. This update will allow servicing of Windows 8 and Windows Server 2012 which require more secure signatures. Due to this change, new revisions to affected updates with more secure signatures may be synchronized by a WSUS server. You will need to apply KB2734608 to get these new revisions to function on Windows 8 and Windows Server 2012.  If you have not already synchronized the new revisions, application of KB2734608 will force the synchronization on the next WSUS sync with Microsoft Update.

This change may require a WSUS or ConfigMgr admin to re-download a significant number of updates to Configuration Manager which were previously downloaded to Deployment Packages. The update will reset the deployment download status to NO and may remove them from Deployment Packages. Deployments of affected packages will not function until the updates are re-downloaded. This change will not affect the update functionality and will not cause client PCs to re-download or reinstall updates that have already been installed.

WSUS Sync and the Sync between WSUS and Configuration Manager are not affected. Additionally, depending on the size of the hierarchy in your environment, the re-download of deployments may generate temporary network load.

For more information please see the MSRC blog (