Update Compliance and Windows Updates

[garethEds]

Morning All,

 

Can anyone help with Update Compliance and Windows Updates? I've set it all up and it's reporting back to the Azure portal - so assume it is working.

 

HOwever it is telling me over 300 machines are out of date with at least two security patches missing. This is true.#

 

So - this means my Windows Updates is not working. Does anyone out there update direct using WfB? If so - could they send me a screenshot of their settings? I have three rings, a day 1 (for my machine), a 5 day ring (for my IT lab) and a 30 day ring (for the whole school - including remote laptops). So based on what I've read this seems standard. I've turned WSUS settings off.

 

MY desktop (0/1 day ring) shows it checked for updates at 1:13am. Fine. Nothing found. Forcing a WIndows update from Microsoft shows me there is 1 update to go on. SO why has it not been picked up?

 

HOWEVER - nothing is updating.

 

Any advice appreciated.

 

Thanks

 

Gareth

Edited December 9, 2021 by garethedmondson

[mavhc]

Have you removed all WSUS updates?

 

Is the UC date recent?

 

Have you set a restart policy to force restart after x days?

[garethEds]

Have you removed all WSUS updates?

 

Is the UC date recent?

 

Have you set a restart policy to force restart after x days?

 

Hiya -

 

 

• All GPOs relating to WSUS have been disabled.
  
• The UC data is from the 8th December at 19:00
  
• Our machines restart daily. Shutdown at 18:00, restart at 07:45.
  

 

Not sure what else I am missing.

 

Gareth

[mavhc]

If you go to the page which gives you a list of computers with problems, and click the arrow > to expand you should see something like LastScan [uTC] 2021-12-08T14:29:20.841Z

 

Is that date recent?

 

For one I've taken offline: LastScan [uTC] 2021-11-12T13:15:13.523Z

[garethEds]

Hiya @mavhc

 

Thanks for helping here. I've looked at one machine running 21H1 19043.867 - there are newer updates. The last scan noted is: 2021-12-08T15:38:02.149Z

 

So with that in mind I assume it is not scanning properly for Windows Updates via WfB.

 

G

[mavhc]

Looks like it's scanning, but deciding not to pick everything, there's various sections of updates, security, drivers, feature, optional. Which ones were not installed?

 

Also check the Windows Update log for clues.