[SOLVED] Win10 does not see available updates

[Marko Viinikainen]

I am running Win10 17134.285 build. My other machine updates just fine and says latest build is 17134.286. Problem machine claims there are no updates to install. It says this machine is updated.
Manually downloading and updating windows works just fine.


Steps I have tried:
-disabled all firewalls and checked updates
-run Win10 update fix tool (done multiple times)
actually this may point to the problem, Update fixer tool says in the end that windows update database is corrupted but cannot fix it.
-manually deleted contents of Softwaredistribution and Catroot2 directories (does'nt help)
-run sfc/scannow (says there are no integrity violations)
-run DISM.exe /Online /Cleanup-image /Restorehealth (no errors found or something similar)
-scanned with Malwarebytes (no threats found)
-scanned with Avast Antivirus ( says no viruses found)


There is no clear error message with a number, win10 says everything is working fine but reality is something else.
Manually checking takes about 10 minutes and after that windows update just says that this machine is updated.

 

[Sysnative Windows Update]

Hello and welcome!

Step#1 - FRST Scan

1. Please download Farbar Recovery Scan Tool and save it to your Desktop.
Note: You need to run the 64-bit Version so please ensure you download that one.
2. Right click to run as administrator. When the tool opens click Yes to disclaimer.
3. Please ensure you place a check mark in the Addition.txt check box at the bottom of the form before running (if not already).
4. Press Scan button.
5. It will produce a log called FRST.txt in the same directory the tool is run from (which should now be the desktop)
6. Please attach the log back here.
7. Another log (Addition.txt - also located in the same directory as FRST64.exe) will be generated Please also attach that along with the FRST.txt in your reply.

 

[Marko Viinikainen]

There are the logs you requested.
Also tried update process with all the firewalls disabled, same result, says machine is up to date.

 

[Sysnative Windows Update]

I see multiple AV/security software installed, please remove them and choose only one.

Remove Comodo using its removal tool and reboot.

Can you uninstall the following applications, reboot and let me know if any updates are detected:

Malwarebytes
Spybot
Macrium Reflect

 

[Marko Viinikainen]

Have done those steps and it seems that the issue is partially fixed. Now the machine installed update KB4457146 security update for adobe flash player but as you can see from the screenshot, Windows update should at least download and install update KB4464218 OS build 17134.286. My other machine that has same cpu as this also downloads and installs update KB 4100347 Intel Microcode update.


Maybe problem is the pending updates? Update repair tool says everytime I run it that there are pending updates to this computer. When I press fix it nothing happens. As you can see from the second screenshot tool claims that the problems are corrected, that is not the case.

 

[Sysnative Windows Update]

Ignore the troubleshooter. It reports that every time. Can I get fresh FRST logs please?

 

[Marko Viinikainen]

There you go. Like I said this machine checks updates about 10-15 minutes and then says machine is up to date. Other machine checks about 30 seconds and then starts downloading updates. I feels that windows tries for a while and then gives up.

 

[Sysnative Windows Update]

Is this a corporate machine?

 

[Marko Viinikainen]

No. I have built it myself and it has never been connected to any domain. Why? Does the logs claim something like that?

 

[Sysnative Windows Update]

There are a lot of restrictions imposed, which you would normally see on corporate machines and not on the home-user's machines.

 

[Marko Viinikainen]

I tweaked some of the security settings and now could install the update KB4100347. Used gpedit.msc to allow automatic updating ja change settings so that updates should install. You there are restrictions, anything that would point me to right direction? Is there some spesific setting that prevents major update like upgrading os build?
It seems that now I have to manually update and wait until there are more updates available and see do these changes help.

 

[Sysnative Windows Update]

I was referring to these:

HKLM Group Policy restriction on software: %HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRoot% <==== ATTENTION
HKLM Group Policy restriction on software: %HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ProgramFilesDir% <==== ATTENTION
HKLM\SOFTWARE\Policies\Microsoft\Windows Defender: Restriction <==== ATTENTION
GroupPolicy: Restriction - Windows Defender <==== ATTENTION
GroupPolicy\User: Restriction ? <==== ATTENTION
CHR HKLM\SOFTWARE\Policies\Google: Restriction <==== ATTENTION
HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Restriction <==== ATTENTION