[SOLVED] Windows Update not working on Server 2016 just added to domain

[ldabney67]

Strange issue with a cleanly installed VM running Server 2016 Datacenter. When it is not connected to the domain I can install updates but as soon as I join it the updates stop. It will get updates for Windows Defender but that is it when it is domain joined.

 

[ldabney67]

Another thing I've found is sfc /scannow keeps finding corrupt files and "fixing" them but it does this every time I run it. Windows Update troubleshooter doesn't find any problems.

There are a lot of duplicate ownership messages and DIRSD OWNER WARNINGs

 

[zcomputerwiz]

Is there a policy specifying that WSUS will be used?

 

[ldabney67]

No, we don't use WSUS

 

[zcomputerwiz]

Export registry as hive

1. Click on the Start
   
   button and in the search box, type regedit
2. When you see regedit on the list, right-click on it and select Run as administrator
3. When regedit opens, using the left pane, navigate to the following registry key and select it by clicking on it once.
   
   HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate
   
   
4. Once selected, click File > Export....
5. Change the Save as type: to Registry Hive Files (*.*)
6. Name this file SideBySide (with no file extension) and save it to your Desktop.
7. Right click on the SideBySide file and choose Send To -> Compressed (zipped) Folder.
8. Attach the zip with your reply.

Command Prompt

Warning: this fix is specific to the user in this thread. No one else should follow these instructions as it may cause more harm than good. If you are after assistance, please start a thread of your own.

1. Click on the Start
   
   button and in the search box, type Command Prompt
2. When you see Command Prompt on the list, right-click on it and select Run as administrator
3. When command prompt opens, copy and paste the following commands into it, press enter after each
   
   powershell
   
   wuauclt /detectnow
   
   Get-WindowsUpdateLog -LogPath C:\windowsupdate.log
   
   
4. This will create a text file windowsupdate.log in your C:\ drive. Please zip and attach this file with your reply.

 

[ldabney67]

Here you go

 

[zcomputerwiz]

2018/08/13 17:21:44.6847559 1176  3380  Agent           Update paused by policy: { ... }

Both feature and quality updates appear to be paused by group policy.
Please check to make sure that the server is in the correct OU in Active Directory.

More information for which policy items to check: Configure Windows Update for Business (Windows 10) | Microsoft Docs

 

[ldabney67]

It is in the correct OU.

 

[ldabney67]

That server had been renamed, so I deleted the old entry in the computer OU.

 

[zcomputerwiz]

Please delete the PauseFeatureUpdates and PauseQualityUpdates values from the WindowsUpdate key, then try checking for updates again.

 

[ldabney67]

That did it. Seriously, you guys are the best.