PENDING Patching Compliance status UNKNOWN

[Chetan J]

Hi All,

In my environment we have around 200 servers with OS Server 2008 R2. Out of these 200 servers we have ESU for 150 servers and the remaining servers are without ESU. We deployed the May month patches around 10 days back and all the servers are showing compliant under Monitoring node in the console but when we check the Overall Compliance report and one of our customized report the 50 servers (without ESU) are showing Unknown status. I have tried everything but the status remains the same.

Windows update.log :

2020-05-28 16:23:50:690 1520 2080 Handler FATAL: UH: 0x800f0823: CreatePackage failed in CCbs::CreatePackage
2020-05-28 16:23:50:690 1520 2080 Agent WARNING: Failed to evaluate Installed rule, updateId = {14D09729-5A17-4086-9F5C-DD6B7FEFD1F0}.202, hr = 80242017
2020-05-28 16:23:50:690 1520 2080 Handler FATAL: UH: 0x800f0823: CreatePackage failed in CCbs::CreatePackage
2020-05-28 16:23:50:690 1520 2080 Agent WARNING: Failed to evaluate Installable rule, updateId = {14D09729-5A17-4086-9F5C-DD6B7FEFD1F0}.202, hr = 80242017
2020-05-28 16:23:50:690 1520 2080 Handler FATAL: UH: 0x800f0823: CreatePackage failed in CCbs::CreatePackage

WUAHandler.log:

Received 'SucceededWithErrors' code from WUA during search. Check WindowsUpdate.log in Windows directory. WUAHandler 5/27/2020 8:32:19 PM 9032 (0x2348)
WU Agent reported the following 1 warning messages: WUAHandler 5/27/2020 8:32:19 PM 9032 (0x2348)
HResult: 0x80242017 Context: uecGeneral Msg: (null). WUAHandler 5/27/2020 8:32:19 PM 9032 (0x2348)

UpdateHandler.log:

Initiating updates scan for checking applicability. UpdatesHandler 5/28/2020 4:25:38 PM 8184 (0x1FF8)
Successfully initiated scan. UpdatesHandler 5/28/2020 4:25:38 PM 8184 (0x1FF8)
Updates scan completion received, result = 0x0. UpdatesHandler 5/28/2020 4:25:38 PM 8264 (0x2048)

UpdatesDeployment.log:

User logon system task UpdatesDeploymentAgent 5/28/2020 4:31:14 PM 7608 (0x1DB8)
GetActionableUpdates: Update (Site_EBD33A23-C740-49C2-B3EF-399087AE6138/SUM_a4903ae2-3b74-4885-9c28-7fdd1db0a08c) superseded, no install attempt required UpdatesDeploymentAgent 5/28/2020 4:31:34 PM 7556 (0x1D84)
EnumerateUpdates for action (UpdateActionInstall) - Total actionable updates = 0 UpdatesDeploymentAgent 5/28/2020 4:31:34 PM 7556 (0x1D84)
User logoff system task UpdatesDeploymentAgent 5/28/2020 4:35:00 PM 4224 (0x1080)
--------------------

The update ID (updateId = {14D09729-5A17-4086-9F5C-DD6B7FEFD1F0}) is KB4538483 for ESU. Please suggest how to fix the issue.

 

[Harshit Pandey]

Under the update deployment go to the deployment settings tab and what state message detail level do you have?

 

[Chetan J]

Under the update deployment go to the deployment settings tab and what state message detail level do you have?

Detail level: Only Success and error messages

 

[Chetan J]

Detail level: Only Success and error messages

I have changed the detail level to All Messages and checked in Monitoring
Under Software Updates - C Deployment states > States 1 : these machines show compliant
but when checking their status in Compliance > Overall Compliance report their status is unknown.