SOLVED Unable to Push windows Update , office and application

[khaled Ali]

Hello every one ,
i have case with my SCCM am unable to push any updates for windows, for example, can`t push 20H2 to upgrade my devices from 1909 to version 2004 or 20h2 also am not able to upgrade any o365 client to the latest version
issue explanation
1- am sync my sccm with WSUS and its successful sync all updates
2- after downloading the required update and deploy it its appear in the monitor section in the unknown tab cliet check passed/active
3- WUA handeler log show error in attached, however, am create GPO to allow Updates and determine the internal Update server.
4- when am try to deploy application its also Stuck in download 0 in software center
5- when try to deploy any Updates its not show in software Center
thanks for advice and help

 

[khaled Ali]

note device is in co-managed mode

 

[Prajwal Desai]

Have you deployed any GPO to point the clients to the server ?. Can you check "HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\windows\WindowsUpdate WUServer" on the device? Correct server?

1. Go to C:\Windows\System32\GroupPolicy\Machine and delete Registry.pol.

2. Run Gpupdate /force

3. Start machine policy retrieval in configuration manager client control

 

[khaled Ali]

thanks @Prajwal Desai for your replay i did step number 1,2,3 but it not solve the issue and after did this steps found in wua handler there is GPO enabled , i dont know why
kindly find attached gpedit and Local GPO and AD GPO setting
kindly noted below :
- my devices in co-mangament mode
-am enabled WUFB from sccm console
- am create windows update rang from sccm but it also not work
- am install Wsus on same sccm site server
- when am disbale local policy and try to syc machine plocy its enable Local GPO by defualt

thanks for your advice in advance prof

 

[Youssef Saad]

found in wua handler there is GPO enabled , i dont know why

First of all, remove all kind of GPOs that set the WU Server, ConfigMgr client will do that.
Check if you have any third party tool installed on the device that overwrite the ConfigMgr SUP policies.

If it's possible to share also the log file, that will be useful for us to help you.

 

[khaled Ali]

thanks @Youssef Saad i check it and disable kaspersky AV and its work