Windows 10 cumulative updates, categorized as ‘Updates’, do not show up in Configuration Manager / WSUS

We are using Configuration Manager current branch to update the existing Windows 10 machines with quality updates. All Configuration Manager Components are running on ‘Server 2016’ + KB4284833. The error is reproducible in CMCB 1802, 1802 + KB4339794 or TP 1806.2.
Windows 10 cumulative updates categorized as ‘Updates’ are not imported in to Configuration Manager WSUS, e.g. KB4284848:

20180629_01

However, Windows 10 cumulative updates categorized as ‘Security Updates’ are imported, e.g. KB4284835:

20180629_02

‘Critical Updates’ like KB4338853 are imported too:

20180629_03

SUP properties are set to import ‘Updates’:

20180629_04 20180629_05

If we try to import the updates manually in WSUS, it fails due to incompatible WSUS version:

20180629_06

This brings us close to the root cause: WSUS Catalog import failures (March 2, 2018) “We are currently working on a known issue with importing updates on WSUS 5.0 (Windows Server 2016) from the Microsoft Update Catalog, which fails with the following error: “This update cannot be imported into Windows Server Update Service because it is not compatible with your version of WSUS”

Using the workaround of switching to Protocol=1.8, we could import the updates in WSUS, so they showed up in CMCB to be handled by ADRs and installed on the clients.

Since this issue is still not fixed, use this as a reminder to check the updates in your Software Update Groups, especially if you use ADRs.

One thought on “Windows 10 cumulative updates, categorized as ‘Updates’, do not show up in Configuration Manager / WSUS

Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out /  Change )

Facebook photo

You are commenting using your Facebook account. Log Out /  Change )

Connecting to %s