31 votes

Should we be installing Windows Security updates?

Short answer - yes. Most of the Windows Updates are security related. Not having the patches means you're vulnerable. Longer answer - you need a procedure that covers this sort of thing. It's more ...
  • 35.9k
18 votes

Should we be installing Windows Security updates?

The generic answer is it is a good practice to keep your servers updated. But pay attention to a few things: Updates may cause the server to be sluggish during installation, or even cause some ...
  • 459
15 votes

Microsoft Windows - Install Updates And Restart (instead of Install and Shutdown)

I see this is an older question, but it's now possible to install updates and then reboot using Powershell. Specifically, you need to download and install the Windows Update PowerShell Module. Then, ...
13 votes

Is it safe to leave Windows Update permanently disabled?

No, it is not safe. Having Windows Update disabled means you are not receiving latest security and other updates from Microsoft. Unless you keep downloading and installing the patches on monthly ...
13 votes
Accepted

Windows Update 800F0922

TL;DR: Clear your C:\Windows\Temp directory and other Temp directories for good-measure - then it should install updates fine. Explanation: As this is an Azure VM, Microsoft's "Basic" support tier ...
  • 2,261
13 votes
Accepted

What is "preview of quality rollup"

A "preview of monthly rollup" patch is just what it says. A preview. Of a monthly rollup. Definition: A tested, cumulative set of new updates that are packaged together and distributed over ...
  • 53.6k
12 votes

Microsoft Windows - Install Updates And Restart (instead of Install and Shutdown)

There are certain benefits to installing updates during rebooting/shut-down: The installation is not slowed down, or tampered with by other running software, AVP, etc. There's no UI to deal with, ...
  • 221
12 votes

How to ensure server 2016 is getting all the latest patches

why windows update is not installing it for me Windows updates are cumulative. 4577015 supersedes 4571694. The problem is not Windows, it is your scanner is not up to date. https://support.microsoft....
  • 34.7k
11 votes
Accepted

Update windows no internet connection

I have used this in the past without issues Wsus Offline Installer
9 votes
Accepted

Do Windows/Automatic updates happen when a PC is sleeping/standby?

Yep, you can configure the "Enabling Windows Update Power Management to automatically wake up the system to install scheduled updates" GPO setting. It requires Vista or higher: Allowing scheduled ...
9 votes

Should clients be able to access ctldl.windowsupdate.com when using WSUS?

It's expected behavior that computers will automatically contact the public Windows Server Update Service, even when there's a specified intranet update location, unless the computer policy "Do not ...
  • 1,719
9 votes
Accepted

Windows Server 2012 R2 update stuck after restart at 9%

Try to access cmd from troubleshooting or SafeMode console, then run the following command: dism.exe /image:C:\ /cleanup-image /revertpendingactions
  • 206
9 votes

Windows 10 Optional Feature Optical Character Recognition Install Failed

After researching this on and off for ages, i finally came across a proper fix for this issue! The problem is applicable to clients that are pointed at a WSUS server and that is where they try to ...
  • 305
8 votes

Windows Update not working on Windows 2012 R2 Standard

i found this great answer here and it worked beautifully for me. Just want to share in case someone is searching: Try this at an elevated command-prompt: netsh winhttp import proxy source=ie ...
  • 322
8 votes

Should we be installing Windows Security updates?

I know mfinni beat me to the punch, but I'm just going to +1 for WSUS. Specifically: Let's assume that you have multiple servers, including test and production. Let's also assume that test has ...
8 votes

Windows Updates taking a long time to install

Something I learned recently, courtesy of Michael Hampton, is that an update to the Windows Malicious Software Removal Tool not only applies the update but also runs the tool, which accounts for the ...
  • 109k
7 votes

How do to uninstall windows updates, from a prompt or PS in Hyper-V server?

Since I just ran into this, and it's not clear from the documentation, when using wusa /uninstall /kb:<kb number> make sure you're using the actual number from the KB, not the number and the KB. ...
7 votes
Accepted

Can I change the update descriptions in WSUS?

Update By using the answer below I created a small tool that automagically adds the descriptions to my WSUS server. I decided to publish my tool on Github, so feel free to try and test it out. https:...
7 votes
Accepted

Disable or Uninstall Malicious Software Removal Tool on Windows Server KB890830 Automatic Maintenance

Turns out the Automatic Maintenance tasks are managed by C:\Windows\System32\MSchedExe.exe and the Scheduled Tasks under the \Microsoft\Windows\TaskScheduler folder. It then will run other tasks that ...
  • 5,560
7 votes

Windows Server 2016, How to avoid automatic reboot after updates?

The default in Windows Server 2016 is 'Download Only', which you note you have also verified using sconfig. This setting does not apply updates at all on its own - so no reboots will occur. By ...
  • 2,597
6 votes
Accepted

Number of important Windows Updates

I am not sure if it is possible to find the number of pending important updates. But in HKLM\Software\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\UAS there is a Key called UpdateCount ...
  • 840
6 votes

Number of important Windows Updates

There are 4 registry keys that will let you know if there are pending updates. HopelessN00b was on the right track, though you have to go up one level to see the keys. HKLM\Software\Microsoft\...
  • 61
6 votes
Accepted

Windows Updates - Download but not install

You can import this PSWindowsUpdate PowerShell module and use the function Get-WUInstall with the parameter -DownloadOnly to download all available Windows Update. It uses the source form the computer ...
6 votes

Windows 10 Optional Feature Optical Character Recognition Install Failed

I was running Windows 10 Build 1803 on a workstation that had been reset. It would constantly attempt to install optional language packs, but fail with error code 0x800F0594. I finally found a ...
  • 61
6 votes
Accepted

Windows 2016 updates and Active Hours

Well, after over an year and some Windows 2016 installation, I can answer to my own question. The answer below may be incorrect in some aspects, as Microsoft is not too keen on details regarding ...
  • 45.1k
6 votes
Accepted

I'm asked to install KB4461614 (MS Office 32 bit) even though my computer is 64bit, why is that?

Even though you may not have installed Office you may have installed another application that used a part of Office in their product. Windows is seeing that you have something installed that needs an ...
6 votes

Server 2012 windows update stuck forever

For anyone reading this: I finally solved the problem. After searching hundreds of topics I found someone who said disabling "desktop experience" solved his problems. I didn't understand why this ...
  • 111
6 votes
Accepted

Switch server core to use Microsoft Update instead of Windows Update

PowerShell oneliner inspired from VBS example in documentation https://docs.microsoft.com/en-us/windows/win32/wua_sdk/opt-in-to-microsoft-update (New-Object -ComObject Microsoft.Update.ServiceManager)...
  • 1,533
5 votes

Strategy for virtualised Windows Server Updates to reduce downtime

Windows server downtime for updates is inevitable. Service downtime is avoidable, however. The key is to realize that downtime needs to be measured by service availability, not the status of ...
  • 15.5k
5 votes

Is there a safe way to cancel updates during windows shutdown

Yes, If you rename or remove C:\Windows\WinSxS\pending.xml file, you could postpone update to next reboot. I advice renaming it. It may require changing the permissions and ownership of the file. I ...

Only top scored, non community-wiki answers of a minimum length are eligible