[SOLVED] Windows 2012 R2 update issue

[mouataz]

Hello,

for a few days I have had a problem updating Windows 2012 R2, the server cannot retrieve the updates from a WSUS.

Here are the actions carried out and attached the logs :
- sfc /scannow
- DISM.EXE /Online /Cleanup-Image /RestoreHealth
- Stop Windows update service and Deletion of SoftwareDistribution.
- I installed both packages (kb5016264 & kb5014025) manually via the DISM command (installation completed successfully).

Thanks for your help

 

[mouataz]

Hello,

I still have the same problem. could you give me a hand to solve it please.

Thank you

 

[PeterJ]

Hello and welcome,

Attach the file C:\Windows\WindowsUpdate.log to your next reply.

 

[mouataz]

Hello,

Here is my windowsupdate.log

 

[PeterJ]

The log file shows these lines (translated into English):

2024-03-11    08:56:59:883     956    364    WS    WARNING: An error occurred while communicating with the endpoint at 'http://wsus:8530/ClientWebService/client.asmx'.
2024-03-11    08:56:59:883     956    364    WS    WARNING: An error occurred while receiving the HTTP response.
2024-03-11    08:56:59:883     956    364    WS    WARNING: The operation was not completed within the allotted time.
2024-03-11    08:56:59:883     956    364    WS    WARNING: The operation timeout has expired

Can you access this url and given file: 'http://wsus:8530/ClientWebService/client.asmx' ?

 

[mouataz]

Yes I can access it

 

[PeterJ]

Try this fix and report the result.
Fixing Windows Updates Failed with Error 0x80244022 | KC's Blog

 

[mouataz]

I doubt it is the wsus that is causing the problem. because there are around a hundred servers (2012 R2, 2016, 2019 and 2022) which receive updates from the same wsus, and I only have the problem on one.

but I tested it anyway. Attached are the logs following the test.

 

[mouataz]

Hello,

The problem is solved.
Here's what I did to resolve it to help other people with the same problem.

1. Open the command prompt with the administrative privilege
2. Run the command: net stop wuauserv. (To stop the Windows update service) Close the Windows update console
3. Delete the following registry keys:
• Note: Export the targeted registry before deleting for safer side and as a best practice 
     - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\SusClientId 
     - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\SusClientIdValidation
4. Rename the file C:\Windows\WindowsUpdate.log as C:\Windows\WindowsUpdate_old.log
5. Rename the folder “C:\Windows\Software Distribution” as “C:\Windows\Software Distribution_old”
6. net start wuauserv (To start the Windows update service)
7. wuauclt /resetauthorization /detectnow (Windows update agent will initiate the connection (termed as contact) with WSUS, after a while, it will report with the WSUS ) 
    Note: WSUS reporting and updating is a time-consuming process approximately 48 hours or more..
8. Confirm the new two key values appear on the path :
   “HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate”
   Check for the updates, once you got the confirmation the AD support team.
   Delete the folder “C:\Windows\Software Distribution_old” and C:\Windows\WindowsUpdate_old.log without fail.

 

[PeterJ]

Thanks for sharing your solution.