[WSUS] Win10 1709 clients not downloading/installing MSRT

[CraigM]

Good day everyone,

 

I have a scenario that I hope someone can help me troubleshoot.

 

Most of my Windows 10 1709 clients are struggling to install the Malicious Software Removal Tool, specifically this April edition. The clients have downloaded and installed the other April patches successfully from WSUS, but haven't been doing anything with this update. Approval is set to install, but the clients just don't seem to download the update for some reason. Windows 7 clients download and install all relevant updates without issue, this seems to be something specific to Windows 10. The odd thing is that some Windows 10 machines are actually downloading and installing the update without needing to be prodded.

 

I've just set a deadline on installation to test out if that makes a difference. Looks like 1 client has now bothered to download the update at least.

 

Anyone have a similar situation or idea of what is going on?

 

That being said, is it even still worthwhile having this tool install these days? Thanks to ESET and some pretty tight policies on user rights etc, we've never had a major outbreak of any malware and I've never seen the MSRT flag and clean anything.