Common WSUS Troubleshooting
Below are the very common WSUS Client-side commands that we can use.
net stop wuauserv
net start wuauserv
net stop bits
net start bits
net stop cryptsvc
net start cryptsvc
wuauclt.exe /detectnow
wuauclt.exe /resetauthorization /detectnow
Wuauclt.exe /resetauthorization /detectnow
net stop bits
net stop wuauserv
reg delete “HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate” /v AccountDomainSid /f
reg delete “HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate” /v PingID /f
reg delete “HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate” /v SusClientId /f
reg delete “HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate” /v SusClientIDValidation /f
rd /s /q “C:\WINDOWS\SoftwareDistribution”
net start bits
net start wuauserv
wuauclt /resetauthorization /detectnow
PowerShell.exe (New-Object -ComObject Microsoft.Update.AutoUpdate).DetectNow()
If you’re on Windows 10/Server 2016 then wuauclt has been deprecated and you have UsoClient.
usoclient.exe startscan to detect missing patches
usoclient.exe refreshsettings to refresh settings if any changes were made
usoclient.exe startdownload to download patches
usoclient.exe startinstall to install patches
Below is a simple list that I like to execute to get it reported to WSUS Server if the Client not reportoing
net stop wuauserv
net start wuauserv
net stop bits
net start bits
net stop cryptsvc
net start cryptsvc
wuauclt.exe /detectnow
usoclient.exe startscan
usoclient.exe refreshsettings
usoclient.exe startdownload
usoclient.exe startinstall
powershell Get-Windowsupdatelog
cmd
exit
On Windows 10 open an administrative powershell prompt and run Get-Windowsupdatelog
One good blog post I found, check out https://arnaudloos.com/2019/wsus-troubleshooting/
