Windows – Force install updates on WSUS server

updatewindowswsus

The WSUS administration console shows computers with not installed (critical) updates.

To be clear:

  • The computers report their status every day.
  • These updates do have a deadline that has already been elapsed.

I assume that these updates have been hidden locally before the computer is joined to the active directory (after joining the AD no user can decline/hide an update with a deadline).

Is there a way to force installing updates?

WSUS version is 3.1.6001.65.

Best Answer

i'm using the script already mentioned by Oskar with psexec to patch a bunch of servers. if a server has a borked WU Agent i use this script:

net stop bits
net stop wuauserv
reg delete HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate /f
rd /s /q %WINDIR%\SoftwareDistribution
gpupdate /force
wuauclt /resetauthorization /detectnow
Related Topic