PENDING Windows 10 not receiving updates via SCCM

[Swapnil173314]

Hello All,

In our environment we have started deploying windows 10 systems and looks like SCCM is not pushing updates to these WIN 10 systems.

Have enabled to received windows 10 updates under site config > software update point > Products etc.

My question is

- Do we need any specific version of SCCM 2012 in order to receive updates - my version is Console Version 5.0.8239.1203 and site version 5.00.8239.1000 SCCM 2012 configuration Manager SP2.

- In my case i can see updates for windows 10 but required and installed count is 0 and compliant count is 92%, why is this so am i missing something.

please help me as we are about to deploy more win 10 system soon and need to SCCm fully functional for this

 

[Prajwal Desai]

Have the updates been downloaded ?.

 

[Swapnil173314]

Yes they being downloaded..... Simply I want that windows 10 updates should be fully managed by SCCM

In group policy path set correct for intranet location.... Users complaining that they receiving feature packs and I hac free unselected feature packs in SCCM but they still receiving feature pack for Windows 10

What I m missing please help??

 

[Hamdan]

Recently Microsoft has release 2 Feature update back to back (1607 and 1703). if you use windows 10 1511 or older, then its a know problem for Microsoft that if 2 feature update are release for same version of windows then WSUS will never push any patches for those OS.
Fist check if you use windows 10 older then 1607 then open the WSUS and select feature update 1703 and mark as a not approved. then only your machine will get the update from your system center.

 

[Swapnil173314]

Thanks for your prmpt reply, i am not a SCCM expert but what i have understood is -

- How to stop feature pack updates via WSUS? to be honest can you please navigate me there?
- having older version than 1607 with not making 1703 unapproved will patches stop flowing to client right?
- user complains that they receive feature packs and OS crash happens > GP set to receive from intranet location which i have set SCCM address > how they receive feature pack then? i m confussed.
- Suppose we dont have SCCM client installed on one of system but it has GP location for windows update set to intranet, will it still receive feature pack from WSUS directly?

just wanted to make sure that windows 10 OS should fully managed by SCCM and no more feature pack should get in directly and want configure SCCM that way.

Quick help is highly appriciated and please forgive me for any confussion have created

screenshot attached is this the option to dselect feature pack??

 

[itrider]

Under SCCM "Administration --> Site Configuration --> Sites"; then "Configure Site Components --> Software Update Point". What do you have under there selected? The original setup guide(s) for SUP mention that you do not need to mess with the legacy WSUS console.

 

[jshenoy]

I am also facing same issue of not downloading the Updates to Windows 10 clients.
I have approved only one Updates but still shows 0% install (2/2) in WSUS server. This percentage of 100% download in WSUS is it mandatory?.
or Can it be deployed by selecting particular Updates in All Software updates section without 100% download....
Sometimes seen Updates stuck at 9% or 18% not going beyond this percentage in WSUS server.
What I m missing please help??
Thanks,
Jaiganesh

 

[Prajwal Desai]

I am also facing same issue of not downloading the Updates to Windows 10 clients.
I have approved only one Updates but still shows 0% install (2/2) in WSUS server. This percentage of 100% download in WSUS is it mandatory?.
or Can it be deployed by selecting particular Updates in All Software updates section without 100% download....
Sometimes seen Updates stuck at 9% or 18% not going beyond this percentage in WSUS server.
What I m missing please help??
Thanks,
Jaiganesh

Are you using SCCM to deploy updates or standalone WSUS ?.

 

[jshenoy]

Are you using SCCM to deploy updates or standalone WSUS ?.

Yes ,I am using SCCM 2016 server for deployment of Updates

 

[Prajwal Desai]

I have approved only one Updates but still shows 0% install (2/2) in WSUS server. - My basic question is why are you using WSUS to manage the updates ?. Why not let SCCM manage the downloads and deployment of updates ?.

 

[jshenoy]

My thin client devices are Windows 10 IoT ,1607 Embedded

 

[jshenoy]

I have approved only one Updates but still shows 0% install (2/2) in WSUS server. - My basic question is why are you using WSUS to manage the updates ?. Why not let SCCM manage the downloads and deployment of updates ?.

I managed deploy updates through SCCM but it doesn't communicates to Client ,summary in SCCM server is green.
But i am able to deploy the updates to WES7 devices succesfully.

My thin client devices are Windows 10 IoT ,1607 Embedded

 

[Kazi]

I have this same issue happening. I cannot get SCCM 2012 R2 running version 1702 with console version of 5.00.8498.1711 and site version of 5.0.8498.1000 to push Windows Updates to Windows 10 version 1703. If I manually install Windows Updates, they will install but pushing Windows Updates and Endpoint Updates via SCCM is not functioning.

 

[Salim Ukani]

I am having exactly same issue, can you tell me what is the Solution as I am unable to deploy Software Updates on Windows 10 version 1703 and above

 

[jshenoy]

I am also facing same issue.
Any prerequisites on client side
that is missing from receiving updates from sccm server? Please suggest
Also does it has licensing limitation on sccm server due to which it is not deploying W10 updates as I am using trial license which is of 180 days .
Please do share the configuration document for wsus in case of w10 and sccm 2016.

 

[Dcasey]

I am facing similar issues in my environment. Deployments for Windows 2012 R2 Server and Windows 7 have worked as they always have without any issues. I finally started trying to update our Windows 10 clients after a major system overall toward the end of last year and following through this year.

The SCCM client software is installed on the Windows 10 computers, but I see them receiving updates directly from the WSUS server that resides on the SCCM site server instead of receiving updates from deployments. As an example, 2 workstations had Office 2016 32-Bit installed, for which I have no deployments in my SCCM environment since this version gets uninstalled and replaced with the 64-Bit version.

I had not yet uninstalled the 32-Bit version after installing the SCCM client, however, the Windows 10 system found all of the Office 2016 32-Bit updates from the SCCM WSUS service. These updates are available on the SUP, but have never been deployed. We are in a secure environment with no Internet access and GPO's have not changed for clients pointing the SCCM server to receive updates.

I am in the process of reviewing why this is occurring and will try and post an update if I can get it figured out. As a side note, Windows 10 servicing is not fully operational because of space constraints on the server, so this will also need to updated and functioning correctly so that I can update the current Windows 10 versions (most are running 1703, some are running 1709, and one is running 1803).

 

[Steve101]

I have the same issue and its really frustrating....and to top it off no one has a solution.....prajwal have you actually experinced this issue before WINDOWS 10 NOT RECEIVING UPDATES VIA SCCM

 

[Gokul]

Hi There ,

Good day

this could be due to many issue
1.Boundary
2.SUP mapping in boundary
3. WSUS content location
4. Selecting correct product (In SUP)
5. More over client logs says all
As a basic troubleshoot we can check above mentioned points

 

[kheldorn]

I have the same issue and its really frustrating....and to top it off no one has a solution.....prajwal have you actually experinced this issue before WINDOWS 10 NOT RECEIVING UPDATES VIA SCCM

I don't think anyone can help you with that unless you give some more information:

- What Windows 10 version(s) is/are affected?
- What SCCM version are you running?
- Can you stop the SMS Agent Host (ccmexec) service on the Windows 10 computer or does the attempt to stop it time out?

We've recently had that problem of Windows 1909 clients not installing updates and software. The SMS Agent Host service on the clients would hang and not communicate with the SCCM server at all anymore.

The solution was to enable to Windows Defender Antivirus service on the Windows 10 machines so that the SMS Agent Host service could communicate with it. Alternative you could disable the Endpoint Protection feature in your SCCM server and redeploy all the SCCM clients (I think. Haven't tested this solution myself.)

Eitherway, the full solution for our Windows 10 1909 + SCCM issue has been published over at my blog at https://beingwinsysadmin.blogspot.com/2020/02/sccm-sms-agent-host-ccmexec-hangs-on.html if you care to see if it fixes your issue too.

 

[Steve101]

I don't think anyone can help you with that unless you give some more information:

- What Windows 10 version(s) is/are affected?
- What SCCM version are you running?
- Can you stop the SMS Agent Host (ccmexec) service on the Windows 10 computer or does the attempt to stop it time out?

We've recently had that problem of Windows 1909 clients not installing updates and software. The SMS Agent Host service on the clients would hang and not communicate with the SCCM server at all anymore.

The solution was to enable to Windows Defender Antivirus service on the Windows 10 machines so that the SMS Agent Host service could communicate with it. Alternative you could disable the Endpoint Protection feature in your SCCM server and redeploy all the SCCM clients (I think. Haven't tested this solution myself.)

Eitherway, the full solution for our Windows 10 1909 + SCCM issue has been published over at my blog at https://beingwinsysadmin.blogspot.com/2020/02/sccm-sms-agent-host-ccmexec-hangs-on.html if you care to see if it fixes your issue too.

The SMS Agent Host is completely greyed out I cannot stop it at all