Device alerts

Article
08/01/2023

Windows Autopatch and Windows Updates use Device alerts to provide notifications and information about the necessary steps to keep your devices up to date. In Windows Autopatch reporting, every device is provided with a section for alerts. If no alerts are listed, no action is needed. Navigate to Reports > Quality update status or Feature update status > Device > select the Device alerts column. The provided information helps you understand:

Microsoft and/or Windows Autopatch performs the action(s) to keep the device properly updated.
The actions you must perform so the device can properly be updated.

Note

At any given point, one or both of these actions can be present in your tenant.

Windows Autopatch alerts

Windows Autopatch alerts are alerts specific to the Windows Autopatch service. These alerts include:

Windows quality and feature update alerts

These alerts represent data reported to the Windows Update service related to Windows quality and feature updates. These alerts can help identify actions that must be performed if an update doesn't apply as expected. Alerts are only provided by device that actively reports to the Windows Update service.

Customer and Microsoft Actions

Windows Autopatch assigns alerts to either Microsoft Action or Customer Action. These assignments give a clear understanding of who has the responsibility to remediate the alert.

Assignment	Description
Microsoft Action	Refers to the responsibility of the Windows Autopatch service to remediate. Windows Autopatch performs these actions automatically.
Customer Action	Refers to your responsibility to carry out the appropriate action(s) to resolve the reported alert.

Alert resolutions

Alert resolutions are provided through the Windows Update service and provide the reason why an update didn't perform as expected. The recommended actions are general recommendations and if additional assistance is needed, submit a support request.

Alert message	Description	Windows Autopatch recommendation(s)
`CancelledByUser`	User canceled the update	The Windows Update service has reported the update was canceled by the user. It's recommended to work with the end user to allow updates to execute as scheduled.
`DamagedMedia`	The update file or hard drive is damaged	The Windows Update service has indicated the update payload might be damaged or corrupt. It's recommended to run `Chkdsk /F` on the device with administrator privileges, then retry the update. For more information, see chkdsk.
`DeploymentConflict`	Device is in more than one deployment of the same update type. Only the first deployment assigned is effective.	The Windows Update service has reported a policy conflict. For more information, see the Windows Autopatch Policy Health dashboard. If the alert persists, submit a support request.
`DeviceRegistrationInvalidAzureADDeviceId`	The device isn't able to register or authenticate properly with Windows Update because of an invalid Microsoft Entra Device ID.	The Windows Update service has reported a device registration issue. For more information, see Windows Autopatch post-device registration readiness checks. If the alert persists, submit a support request.
`DeviceRegistrationInvalidGlobalDeviceId`	The device isn't able to register or authenticate properly with Windows Update because of an invalid Global Device ID.	The Windows Update service has reported that the MSA Service may be disabled preventing Global Device ID assignment. Check that the MSA Service is running or able to run on device. If the alert persists, submit a support request.
`DeviceRegistrationIssue`	The device isn't able to register or authenticate properly with Windows Update.	The Windows Update service has reported a device registration issue. For more information, see Windows Autopatch post-device registration readiness checks. If the alert persists, submit a support request.
`DeviceRegistrationNoTrustType`	The device isn't able to register or authenticate properly with Windows Update because it can't establish Trust.	The Windows Update service has reported a device registration issue. For more information, see Windows Autopatch post-device registration readiness checks. If the alert persists, submit a support request.
`DiskFull`	The installation couldn't be completed because the Windows partition is full.	The Windows Update service has reported there's insufficient disk space to perform the update. Free up disk space on the Windows partition and retry the installation. For more information, see Free up space for Windows Updates.
`DownloadCancelled`	Windows Update couldn't download the update because the update server stopped the connection.	The Windows Update service has reported an issue with your update server. Validate your network is working and retry the download. If the alert persists, review your network configuration to make sure that this computer can access the internet. For more information, see Check your network connection status.
`DownloadConnectionIssue`	Windows Update couldn't connect to the update server and the update couldn't download.	The Windows Update service has reported an issue connecting to Windows Update. Review your network configuration, and to make sure that this computer can access the internet and Windows Update Online. For more information, see Check your network connection status.and Endpoints for Delivery Optimization and Windows Update. If the alert persists, submit a support request.
`DownloadCredentialsIssue`	Windows Update couldn't download the file because the Background Intelligent Transfer Service (BITS) couldn't connect to the internet. A proxy server or firewall on your network might require credentials.	The Windows Update service Windows has reported it failed to connect to Windows Updates. This can often be an issue with an Application Gateway or HTTP proxy, or an issue on the client. Retry the download. Review your network configuration to make sure that this computer can access the internet. Validate and/or allowlist Windows Update and Delivery Optimization endpoint. For more information, see Check your network connection status.and Endpoints for Delivery Optimization and Windows Update. If the alert persists, submit a support request.
`DownloadIssue`	There was an issue downloading the update.	The Windows Update service has reported it failed to connect to Windows Updates. This can often be an issue with an Application Gateway or HTTP proxy, or an issue on the client. For more information, see Check your network connection status.and Endpoints for Delivery Optimization and Windows Update. If the alert persists, submit a support request.
`DownloadIssueServiceDisabled`	There was a problem with the Background Intelligent Transfer Service (BITS). The BITS service or a service it depends on might be disabled.	The Windows Updates service has reported that the BITS service is disabled. In the local client services, make sure that the Background Intelligent Transfer Service is enabled. If the service isn't running, try starting it manually. For more information, see Issues with BITS. If it will not start, check the event log for errors or submit a support request.
`DownloadTimeout`	A timeout occurred while Windows tried to contact the update service or the server containing the update's payload.	The Windows Update service has reported it attempted to download the payload and the connection timed out. Retry downloading the payload. If not successful, review your network configuration to make sure that this computer can access the internet. For more information, see Check your network connection status.
`EndOfService`	The device is on a version of Windows that has passed its end of service date.	Windows Update service has reported the current version is past End of Service. Update device to a version that is currently serviced in Feature update overview. For more information on OS versioning, see Windows 10 release information.
`EndOfServiceApproaching`	The device is on a version of Windows that is approaching its end of service date.	Update device to a version that is currently serviced in Feature update overview. For more information on OS versioning, see Windows 10 release information.
`FailureResponseThreshold`	The failure response threshold setting was met for a deployment to which the device belongs.	The Windows Update service has reported the client has hit the Failure Response Threshold. Consider pausing the deployment and assess for issues. If the alert persists, submit a support request.
`FileNotFound`	The downloaded update files can't be found. The Disk Cleanup utility or a non-Microsoft software cleaning tool might have removed the files during cleanup.	Windows Update has reported that the update files couldn't be found, download the update again, and then retry the installation. This can often occur with third party security products. For more information, see Virus scanning recommendations for Enterprise computers that are running Windows or Windows Server (KB822158). If the alert persists, submit a support request.
`Incompatible`	The system doesn't meet the minimum requirements to install the update.	The Windows Update service has reported the update is incompatible with this device for more details please review the `ScanResult.xml` file in the `C:\WINDOWS\PANTHER folder for "Block Type=Hard`. If this is occurring on a Windows Autopatch managed device, submit a support request.
`IncompatibleArchitecture`	This update is for a different CPU architecture.	The Windows Update service has reported the update architecture doesn't match the destination architecture, make sure the target operating system architecture matches the host operating system architecture. This is not typical for Windows Update based environments. If this is occurring on a Windows Autopatch managed device, submit a support request.
`IncompatibleServicingChannel`	Device is in a servicing channel that is incompatible with a deployment to which the device belongs.	The Windows Update service has reported the servicing channel on the client isn't compatible with the targeted payload. We recommend configuring the device's servicing channel to the Semi-Annual Enterprise Channel.
`InstallAccessDenied`	Installer doesn't have permission to access or replace a file. The installer might have tried to replace a file that an antivirus, anti-malware, or a backup program is currently scanning.	The Windows Update service has reported it couldn't access the necessary system locations, ensure no other service has a lock or handle on the windows update client folders and retry the installation. This can often occur with third party security products. For more information, see Virus scanning recommendations for Enterprise computers that are running Windows or Windows Server (KB822158).
`InstalledCancelled`	The installation was canceled.	The Windows Update service has reported the update was canceled by the user. It's recommended to work with the end user to allow updates to execute as scheduled. If the alert persists, submit a support request.
`InstallFileLocked`	Installer couldn't access a file that is already in use. The installer might have tried to replace a file that an antivirus, anti-malware, or backup program is currently scanning.	The Windows Update service has reported it couldn't access the necessary system locations. Check the files under the `%SystemDrive%\$Windows.~bt` directory and retry the installation. This can often occur with third party security products. For more information, see Virus scanning recommendations for Enterprise computers that are running Windows or Windows Server (KB822158). If the alert persists, submit a support request.
`InstallIssue`	There was an issue installing the update.	The Windows Update service has reported the update installation has failed. If the alert persists, run "`dism /online /cleanup-image /restorehealth`" on the device with administrator privileges, then retry the update. For more information, see Repair a Windows Image if the command fails. A reinstall of Windows may be required. If the alert persists, submit a support request.
`InstallIssueRedirection`	A known folder that doesn't support redirection to another drive might have been redirected to another drive.	The Windows Update service has reported that the Windows Update file location may be redirected to an invalid location. Check your Windows Installation, and retry the update. If the alert persists, submit a support request.
`InstallMissingInfo`	Windows Update doesn't have the information it needs about the update to finish the installation.	The Windows Update service has reported that another update may have replaced the one you're trying to install. Check the update, and then try reinstalling it.
`InstallOutOfMemory`	The installation couldn't be completed because Windows ran out of memory.	The Windows Update service has reported the system doesn't have sufficient system memory to perform the update. Restart Windows, then try the installation again. If it still fails, allocate more memory to the device, or increase the size of the virtual memory pagefile(s). For more information, see How to determine the appropriate page file size for 64-bit versions of Windows.
`InstallSetupBlock`	There's an application or driver blocking the upgrade.	The Windows Update service has detected that an application or driver is hindering the upgrade process. Utilize the SetupDiag utility to identify and diagnose any compatibility problems. For more information, see SetupDiag - Windows Deployment.
`InstallSetupError`	Windows Setup encountered an error while installing.	The Windows Update service has reported an error during installation.Review the last reported HEX error code in Quality update status report to further investigate. If the alert persists, submit a support request.
`PolicyConflict`	There are client policies (MDM, GP) that conflict with Windows Update settings.	The Windows Update service has reported a policy conflict. Review the Windows Autopatch Policy Health dashboard. If the alert persists, submit a support request.
`PolicyConflictDeferral`	The Deferral Policy configured on the device is preventing the update from installing.	The Windows Update service has reported a policy conflict. Review the Windows Autopatch Policy Health dashboard. If the alert persists, submit a support request.
`PolicyConflictPause`	Updates are paused on the device, preventing the update from installing.	The Windows Update service has reported a policy conflict. Review the Windows Autopatch Policy Health dashboard. If the alert persists, submit a support request.
`PostRestartIssue`	Windows Update couldn't determine the results of installing the update. The error is usually false, and the update probably succeeded.	The Windows Update Service has reported the update you're trying to install isn't available. No action is required. If the update is still available, retry the installation.
`RollbackInitiated`	A rollback was started on this device, indicating a catastrophic issue occurred during the Windows Setup install process.	The Windows Update service has reported a failure with the update. Run the Setup Diagnostics Tool on the Device or review the HEX error in Quality update status report. Don't retry the installation until the impact is understood. For more information, see SetupDiag - Windows Deployment.
`SafeguardHold`	Update can't install because of a known Safeguard Hold.	The Windows Update Service has reported a Safeguard Hold which applies to this device. For more information about safeguards, see Windows 10/11 release information for the affected version(s).
`UnexpectedShutdown`	The installation was stopped because a Windows shutdown or restart was in progress.	The Windows Update service has reported Windows was unexpectedly restarted during the update process. No action is necessary the update should retry when windows is available. If the alert persists, ensure the device remains on during Windows installation.
`VersionMismatch`	Device is on a version of Windows that wasn't intended by Windows Update.	The Windows Update service has reported that the version of Windows wasn't intended. Confirm whether the device is on the intended version.
`WindowsRepairRequired`	The current version of Windows needs to be repaired before it can be updated.	The Windows Update service has indicated that the service is in need of repair. Run the Startup Repair Tool on this device. For more information, see Windows boot issues - troubleshooting.
`WUBusy`	Windows Update can't do this task because it's busy.	The Windows Update service has reported that Windows Update is busy. No action is needed. Restart Windows should and retry the installation.
`WUComponentMissing`	Windows Update might be missing a component, or the update file might be damaged.	The Windows Update service has reported key components for windows update are missing. Run "`dism /online /cleanup-image /restorehealth`" on the device with administrator privileges, to repair these components. Then retry the update. For more information, see Repair a Windows Image if the command fails. A reinstall of Windows may be required.
`WUDamaged`	Windows Update or the update file might be damaged.	The Windows Update service has reported key components for windows update are missing. Run "`dism /online /cleanup-image /restorehealth`" on the device with administrator privileges to repair these components. Then retry the update. For more information, see Repair a Windows Image if the command fails. A reinstall of Windows may be required.
`WUDecryptionIssue`	Windows Update couldn't decrypt the encrypted update file because it couldn't find the proper key.	The Windows Update service has reported it couldn't decrypt the update payload. This alert could be a network transit error and may be resolved on its own. If the alert persists, validate any network Riverbeds, Application or http proxies and retry.
`WUDiskError`	Windows Update encountered an error while reading or writing to the system drive.	The Windows Update service has reported an alert reading or writing to the system disk. This alert is often a client issue with the target system. We recommend running the Windows Update Troubleshooter on the device. Retry the installation. For more information, see Windows Update Troubleshooter.
`WUIssue`	Windows Update couldn't understand the metadata provided by the update service. This error usually indicates a problem with the update.	The Windows Update service has reported an issue with the Update payload. This could be a transient alert. If the alert persists, submit a support request.