Installation and Patching

  • Hot ideas
  • Top ideas
  • New ideas
  • My feedback
  1. make "scheduled install day/time" GPO setting work for server 2016

    the "Scheduled install day" and "scheduled install time" group policy settings under "computer/administrative templates/windows components/windows update/configure automatic updates" are being ignored by server 2016 in favor of "active hours." having active hours on servers is utterly ridiculous. I need certain servers to reboot in a certain order only on Saturday nights.

    27 votes
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)

    We’ll send you updates on this idea

    2 comments  ·  Windows Update  ·  Flag idea as inappropriate…  ·  Admin →
  2. Set e-mail configuration in WSUS API

    We can configure a new WSUS server using the COM API and PowerShell cmdlets for every option in the UI except for setting the e-mail notifications.

    We can Get them:
    https://docs.microsoft.com/en-us/previous-versions/windows/desktop/aa349873(v%3Dvs.85)

    ...but there's no way to Set them.

    At my company, the build is fully automated including installation and configuration of WSUS, but for the e-mail notification settings.

    1 vote
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)

    We’ll send you updates on this idea

    1 comment  ·  WSUS  ·  Flag idea as inappropriate…  ·  Admin →
  3. 01606

    not able to print from this comp.?

    1 vote
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)

    We’ll send you updates on this idea

    0 comments  ·  Flag idea as inappropriate…  ·  Admin →
  4. More that "Preparing" in Server 2016

    When patching Windows Server 2016 (maybe 10 as well) it always says "Preparing to install". Doesn't matter if it's checking for updates, downloading updates, or installing updates. It always shows "Preparing to install". Right now I'm patching three new Server 2016 VM Templates and they all show "Preparing to install updates xx%".

    Can we please go back to the Win2012 and previous messages that showed what was actually being done, not what we're preparing for?

    2 votes
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)

    We’ll send you updates on this idea

    0 comments  ·  Patch Behaviors  ·  Flag idea as inappropriate…  ·  Admin →
  5. Allow CNAME to be used for the WSUS SSL certificate

    Switching WSUS to run on SSL is easy, but you can only configure it to use a certificate that matches the hostname.

    We're in the age where servers are in the cloud and can be regularly rebuilt using automation, where the default hostname will change with each rebuild.

    This means that, if you're using a DNS CNAME to point clients to your WSUS server, you can't run WSUS on SSL.

    If we could configure WSUS to use a certificate that is issued using a CNAME, we can point the CNAME to the new server, and everything works. No need to…

    1 vote
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)

    We’ll send you updates on this idea

    0 comments  ·  WSUS  ·  Flag idea as inappropriate…  ·  Admin →
  6. Please provide full information what is fixed in cumulative updates

    Please provide full information what is fixed in cumulative updates. What kind of information is this:

    https://support.microsoft.com/en-us/help/4038782
    Security updates to Microsoft Graphics Component, Windows kernel-mode drivers, Windows shell, Microsoft Uniscribe, Microsoft Edge, Windows scripting, Device Guard, Windows TPM, Internet Explorer, Microsoft Scripting Engine, Windows Hyper-V, Windows kernel, and the Windows DHCP Server.

    We need proper description of fixes for an OS we pay licenses.

    48 votes
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)

    We’ll send you updates on this idea

    1 comment  ·  Windows Update  ·  Flag idea as inappropriate…  ·  Admin →
  7. pwsh should have an install, probably via 'make install' for linux versions

    Currently for arch it looks like someone dissassembles your .deb package and moves things around. It would be a lot easier on us to just be able to make install, or at least for a suggested folder structure to go into the .tar.gz. At very least, the files should be put into a subdirectory as is the norm with all linux installs. I ruined my download folder with the current package

    2 votes
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)

    We’ll send you updates on this idea

    0 comments  ·  Deployment & Installation  ·  Flag idea as inappropriate…  ·  Admin →
  8. WSUS Console search improvements

    WSUS should have an easy way to search for all updates for a specific product

    3 votes
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)

    We’ll send you updates on this idea

    0 comments  ·  Patch Management  ·  Flag idea as inappropriate…  ·  Admin →
  9. FIX the Windows Update Log issues with Windows 10 and Server 2016

    Include al necessary symbol files and updates to base OS and current updates. Many environments do not allow server access (and in some instances workstation access) to the internet to update symbol files as needed. I have tried every posted articles suggestions on getting the windows update log into useful, understandable English, with the only success being to reimage my windows 10 Enterprise desktop. I refuse to do so with my domain 2016 servers!

    42 votes
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)

    We’ll send you updates on this idea

    4 comments  ·  WSUS  ·  Flag idea as inappropriate…  ·  Admin →
  10. Ease migration from Windows Server 2016 to Windows Server Semi-Annual

    It would be nice to have a way to easily upgrade or migrate from Windows Server 2016 to Windows Server Semi-Annual

    7 votes
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)

    We’ll send you updates on this idea

    0 comments  ·  Upgrade & MIgrate  ·  Flag idea as inappropriate…  ·  Admin →
  11. Windows update troubleshooter (server 2016)

    Windows update troubleshooter (fully patched server 2016) using the built-in tool always reports 0x80070057 "potential windows update database error detected" If you run the tool available here then no errors are reported. https://support.microsoft.com/en-us/help/4027322/windows-update-troubleshooter

    6 votes
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)

    We’ll send you updates on this idea

    0 comments  ·  Windows Update  ·  Flag idea as inappropriate…  ·  Admin →
  12. Allow adding a shortcut for Windows Update UI on Server 2016

    In Windows Server 2012 R2 or earlier you could create a shortcut to the Windows Update section of the control panel. In 2016 you can no longer (that I could find) do this. While most all of our updating/patching is automated sometimes and for a few servers we manually update.

    Having this shortcut saves me from having to search for "windows update" every time I need to go to use it.

    Can we add a method for creating a shortcut to put on the task bar or on the desktop to Windows Update? If it's already available how does one…

    3 votes
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)

    We’ll send you updates on this idea

    1 comment  ·  Windows Update  ·  Flag idea as inappropriate…  ·  Admin →
  13. URGENT: Seperate Category for Preview Update Rollups needed!

    Actually it is not really possible to use automatic acknowledgement rules without acknowledgeing any Preview security or preview feature upates for Windows 7, 8.1 etc.

    Please put them a seperate WSUS Category e.g. preview rollups so that an effective testing can be made with rulesets and a test group of computers.

    31 votes
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)

    We’ll send you updates on this idea

    7 comments  ·  WSUS  ·  Flag idea as inappropriate…  ·  Admin →
  14. Show more detail when installing updates during shutdown/reboot

    Installing a Windows Server 2016 cumulative update (e.g. after setting up a new server) can take pretty long. After a few minutes, the unchanging message "Getting Windows ready / Don't turn off your computer", despite its looping dots, stops inspiring confidence that progress is being made.

    Monitoring %windir%\Logs\CBS\CBS.log helps slightly, at least until "CommitPackagesState: Started persisting state of packages".

    I would therefore request that
    * on Windows Server, and optionally on Windows 10 as a configurable option, the "Getting Windows ready" screen shows additional detail, similar to the output in CBS.log (e.g. "processing package 1564/7144 for KB4025339")
    * if possible,…

    23 votes
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)

    We’ll send you updates on this idea

    0 comments  ·  Patch Behaviors  ·  Flag idea as inappropriate…  ·  Admin →
  15. Please implement effective filtering options in Microsoft Update Catalog Search

    I am missing to have more options than just a very common keyword search in Microsoft Update Catalog.

    setting up filters like OS version, branch, x86 / x64 and update categories AND date equal / greater than would be amazingly helpful to find a specific group of updates.

    Admit it, the current search is not very helpful if you are NOT searching for a specific KB but a set of updates.

    E.g. try to enlist all Windows 2003 Server Updates released after January 2017. Good luck, trying.

    19 votes
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)

    We’ll send you updates on this idea

    1 comment  ·  Windows Update  ·  Flag idea as inappropriate…  ·  Admin →
  16. Separate Windows 10 by branch / version

    Actually Windows 10 on WSUS is only reflected by a major product category and LTSB.

    It would be much better if you could add a product category for each branch / release:

    such as:
    Windows 10 1507 (LTSB 2015)
    Windows 10 1511
    Windows 10 1607 (LTSB 2016, CBB)
    Windows 10 1703 (CB)

    This would allow companies with a good patch management to effectively avoid downloading CU patches for Windows 10 that they do not use and also would help to categorize updates in the views.

    19 votes
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)

    We’ll send you updates on this idea

    5 comments  ·  WSUS  ·  Flag idea as inappropriate…  ·  Admin →
  17. Increase Active Hours from 12 hours to 22 hours

    The current 12 hour window for "Active Hours" needs to be longer so the updates/reboots can happen in the middle of the night.

    29 votes
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)

    We’ll send you updates on this idea

    8 comments  ·  Patch Management  ·  Flag idea as inappropriate…  ·  Admin →
  18. Change update behavior on Windows Server 2016

    In server 2016 when downloading an update it also installs the same time (no option to only download), then the 12hour window begins, when this is over and time is outside worktimeframe (which is a somehow strange setting for a server) the server automatically reboots.

    The same when I install something microsoft related during workhours which normaly has no effect on user experience, but if setup installs also a patch then the reboot countdown also starts.

    Please change back to the old behavior where downloading updates and installing them where different tasks and also rebooting had to be user initiated.

    25 votes
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)

    We’ll send you updates on this idea

    1 comment  ·  Windows Update  ·  Flag idea as inappropriate…  ·  Admin →
  19. Implement complete removal of unsused products in WSUS 3.x

    Please implement an ability to really get rid off unused products in WSUS 3.x

    Example:
    A company once used XP and 7 and now upgraded to Windows 10. However it is not possible to really purge old products from the WSUS database.

    The Update files can be removed using the cleanup wizard, but the entries in the MSSQL DB will remain.

    Especially if one has once used the older drivers category that has been reorganized for Windows 10, this causes a lot of performance issues and only a fresh WSUS without adding old products and categories will help.

    This is…

    10 votes
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)

    We’ll send you updates on this idea

    2 comments  ·  WSUS  ·  Flag idea as inappropriate…  ·  Admin →
  20. Implement WID reindexing and DB shrinking for WSUS on WID

    There exist a technet site with a maintenance SQL script to reindex the WID for WSUS 3.x, it would be great if you could implement this into the GUI, aside having a capability to backup and restore, aswell as shrinking the WID database.

    10 votes
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)

    We’ll send you updates on this idea

    0 comments  ·  WSUS  ·  Flag idea as inappropriate…  ·  Admin →
  • Don't see your idea?

Feedback and Knowledge Base