I recently was working on an issue where device gets its software updates from Microsoft [windows update] which i didn’t wanted this way. After troubleshooting, i found that the registry key needs to be changed in order devices looks for updates from WSUS.
to check where the devices gets its update use this cmd.
$MUSM = New-Object -ComObject "Microsoft.Update.ServiceManager" $status = $MUSM.Services $status | select name, IsDefaultAUService
if you run this powershell cmd, you will see that “windows update” shows “True”
If you open the Registry with path “Computer\HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate” you will see the “DisableDualScan” value is “0”.
To fix the issue, either change the value to “1” manually or use this powershell script to change value to “1”
############################################################# ############### this logic first check if key disabledualscan exist then update the value to 1, if key not exist then it will create it with value 1 $path = "HKLM:SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate" $disableDualScan = get-itemproperty -path "HKLM:SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate" -Name 'DisableDualScan' if [test-path $path] { if[$DisableDualScan]{ Set-Itemproperty -path "HKLM:SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate" -Name 'DisableDualScan' -value 1 }else { New-Itemproperty -path "HKLM:SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate" -PropertyType Dword -Name 'DisableDualScan' -value 1 } } ############################################################################################################ ############## the one line cmdlet create the key or update the key to value 1 Set-Itemproperty -path "HKLM:SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate" -Name 'DisableDualScan' -value 1 -Verbose ###########################################################################################################
AFter you apply the fix then run again the cmd to check what is the status
$MUSM = New-Object -ComObject "Microsoft.Update.ServiceManager" $status = $MUSM.Services $status | select name, IsDefaultAUService
You will see the result shows “Windows server update service = True ”
Now the device will always look for WSUS to gets its software updates and being manage by WSUS.
Read Next
March 25, 2022
Install Windows Updates on remote machine
March 25, 2022
Get-hotfix -asJob Remote machine
March 25, 2022
install module on remote machine
March 25, 2022
get patch installed as background job
Back to top button
- Remove From My Forums
Question
I want to get updates from only wsus.
But when i watch windows update log,
there are lot of log like below.2018/01/15 09:04:36.1520630 7364 6424 SLS [0]1CC4.1918::01/15/2018-09:04:36.152 [sls]Making request with URL //sls.update.microsoft.com/SLS/{3DA21691-E39D-4DA6-8A4B-B43877BCB1B7}/x64/10.0.15063.0/0?CH=796&L=ja-JP&P=&PT=0x30&WUA=10.0.15063.726&MK=Dell+Inc.&MD=XPS+13+9350
My computer downloaded from windows update.
My wsus register settings are below.
Is there any mistake?
Please help me and sorry about terrible english.
Answers
Hi khmbt,
Enable "Do not connect to any Windows Update Internet locations" policy through Group Policy.
Computer Configuration -> Administrative Templates -> Windows Components -> Windows Update ->Do not connect to any Windows Update Internet locations
- Marked as answer by Thursday, January 18, 2018 1:56 AM
hello kmbt,
If you're getting this errors for Win 10,
Please refere this,
//blog.tofte-it.dk/wsus-windows-10-clients-error-0x8024500c/
As Additionally, use these guidelines to troubleshoot WSUS.
- Check whether the WSUS service in running status or not. Then Stop and restart WSUS service on WSUS client PC.
- Check whether the relevant group policy settings are applied or not.
Open cmd and run:ngpresult /r and rsop.msc
3. Check Availability of Registry settings.
HKLM->Software->Policies->Microsoft->Window->WindowsUpdate
4. Make sure he WSUS client can see the WSUS website by navigating to :
//[Name Of WSUS Server]:8530/Selfupdate/iuident.cab and make sure open/download the file
5.View Proxy configuration on WSUS client
Open cmd and run :
i.netsh winhttp show proxy
ii. netsh winhttp import proxy source=ie6.Open cmd and Run ‘wuauclt / detectnow’ command
7.Check WSUS log file in below path for errors
c:\windows\WindowsUpdate.log8.Sometimes image a machine [or a clone a VM] keeps it’s unique update ID.
If this happens then the first machine with this ID to register gets listed, and all the rest do not. To find out if this is the problem,
i.locate and stop the WSUS service on the affected client.
ii. Open Registry Editor and navigate to:
HKLM->Software->Microsoft->Windows->Current Version->WinowsUpdateiii. Delete SusClientID entry.
iv. Restart WSUS service and run below commands.
Wuauclt /resetauthorization /detectnow
Wuauclt /reportnow- Proposed as answer by Elton_Ji Tuesday, January 16, 2018 5:24 AM
- Marked as answer by khmbt Thursday, January 18, 2018 12:59 AM